[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_701":702,"_703":704},"routes/_app.x.$handle.$name",{"_99":98,"_33":45,"_108":89,"_28":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":27,"_123":124,"_125":25,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_33":45,"_38":46,"_47":-5,"_48":27,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":25,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":27},"version",706,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":29},"file",{"_31":32,"_33":29,"_34":20,"_35":37,"_38":39,"_40":14,"_41":42,"_24":27},"previous",{"_31":32,"_33":29,"_34":20,"_35":36},"deleted",true,"deletedHere",false,"path","SOURCE-BUNDLE.part2.txt","latestPath","fileId","15e8a494-9081-11f1-9b4f-1607ee4eb77e","name","fileType","content","THE DOGS SPOT — SOURCE BUNDLE (part 2 of 17)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (2 of 61 files)\n\n\n\n================================================================================================\n=====FILE tests/dashboard.test.mjs#1 =====\n// THE DASHBOARD'S PROMISES. v2.0, 5 Aug 2026.\n// Most of this is deliberately hostile, because the page's whole claim is \"always renders something\n// true\". Every D2b case is a real defect a stranger caught, pinned so it cannot return.\nimport * as W from \"../build/worklog.js\";\nimport * as DASH from \"../build/dashboard.js\";\nimport * as H from \"../build/holiday-deposits.js\";\nimport * as DEC from \"../build/decisions.js\";\nimport { readFileSync } from \"node:fs\";\nimport { suite, ok, eq, scoped, codeOnly } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"dashboard\");\nconst MONTHS_D = [\"Jan\", \"Feb\", \"Mar\", \"Apr\", \"May\", \"Jun\", \"Jul\", \"Aug\", \"Sep\", \"Oct\", \"Nov\", \"Dec\"];\nconst prettyDate = (iso) => {\n const m = /^(\\d{4})-(\\d{2})-(\\d{2})/.exec(iso || \"\");\n return m ? `${MONTHS_D[Number(m[2]) - 1] ?? m[2]} ${Number(m[3])}` : iso;\n};\n// EVERY structural assertion below reads `src`, and `src` is the file with its comments removed.\n// A `[was: ...]` note that names the old call is not evidence that the old call is gone.\n// [was: the raw file. On 5 Aug the check `observedCadenceMin(wd?.history)` passed on a comment\n// explaining why that call had been removed. The green was real; the guarantee was not.]\nconst rawSrc = readFileSync(new URL(\"../engine/dashboard.ts\", import.meta.url), \"utf8\");\nconst src = codeOnly(rawSrc);\n\nheader(\"THE HOLIDAY DEPOSIT CARD\");\n\n// A real-shaped blob. Every string in it is what the collector actually produces.\nconst DEPBLOB = {\n // RELATIVE TO NOW, deliberately. [was: a hardcoded timestamp, which the stale-list banner\n // (fires past 36 hours of real elapsed time) would have turned red on 8 August with no code\n // change at all — the entire regression net going permanently RED on the wall clock.]\n at: new Date(Date.now() - 60_000).toISOString(), season: 2026,\n windows: [{ name: \"Thanksgiving\", from: \"2026-11-23\", to: \"2026-11-29\" },\n { name: \"Christmas and New Year\", from: \"2026-12-20\", to: \"2027-01-02\" }],\n rows: [\n { contactId: \"a\", name: \"Jeffrey Musselwhite\", day: \"2026-11-25\", until: \"2026-11-28\", dogs: [\"Achilles\", \"Ghost\"], dogCount: 2, window: \"Thanksgiving\",\n state: \"seen\", amountSeen: 100, note: \"A card payment for exactly $100.00 is on file on Oct 5, which is the deposit for 2 dogs.\" },\n { contactId: \"b\", name: \"Ann Flu\", day: \"2027-01-01\", until: \"2027-01-01\", dogs: [\"Fluffy\"], dogCount: 1, window: \"Christmas and New Year\",\n state: \"none_seen\", amountSeen: 0, note: \"The deposit on this stay is $50.00 (1 dog at $50) and no card payment is on file around it at all. A deposit paid by Venmo, Zelle, cheque or cash does not reach the card system, so it will not show here.\" },\n { contactId: \"c\", name: \"Reid Fail\", day: \"2026-11-24\", until: \"2026-11-24\", dogs: [], dogCount: 1, window: \"Thanksgiving\",\n state: \"could_not_check\", amountSeen: 0, note: \"We could not read this person's payments just now, so this one is unknown. It is not a finding either way.\" },\n ],\n // GENERATED, not typed. [was: a hardcoded sentence carrying pre-round-6 copy, so D5.4's\n // Venmo/Zelle assertion was satisfied by the fixture rather than by anything the code produces.]\n sentence: H.depositSentence([{ state: \"seen\" }, { state: \"none_seen\" }, { state: \"could_not_check\" }], false),\n feedDead: false, readFailures: 1, calendarsRead: 2, calendarsAsked: 2, pickupsRead: 2, pickupsAsked: 2,\n};\nconst noAgo = () => \"just now\";\n\nt(\"D5.1 a failed read of the list is a reading problem, never a finding about a customer\", () => {\n const h = DASH.depositCard(null, false, noAgo);\n ok(/could not read/i.test(h), \"a failed read does not say so\");\n ok(!/holiday stays are booked|worth checking/i.test(h), \"a failed read produced a list anyway\");\n ok(!/\\bunpaid\\b|owes|has not paid/i.test(h));\n return scoped(3, \"guarantees\");\n});\n\nt(\"D5.2 nothing collected yet says exactly that, and does not read as nobody has paid\", () => {\n const h = DASH.depositCard(null, true, noAgo);\n // [was: /Nothing collected yet/. Under a heading that reads \"Holiday deposits\", the words\n // \"Nothing collected yet\" are a sentence about MONEY — you have taken no deposits — when the\n // fact being reported is about the report: it has not run. Same three words, opposite meaning,\n // and the wrong one is the reassuring-looking zero this whole card exists not to print.]\n ok(/has not run yet/i.test(h), \"the empty state does not say plainly that the check has not run\");\n ok(!/collected/i.test(h), \"the empty state still reads as a statement about money taken\");\n ok(!/\\bunpaid\\b|owes|has not paid|0 holiday/i.test(h));\n return scoped(3, \"guarantees\");\n});\n\nt(\"D5.3 the jobs to do come first and the settled ones last\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n const i = (s) => h.indexOf(s);\n ok(i(\"Ann Flu\") < i(\"Reid Fail\"), \"an unknown row outranks a stay actually worth checking\");\n ok(i(\"Reid Fail\") < i(\"Jeffrey Musselwhite\"), \"a settled row is above one that could not be checked\");\n return scoped(3, \"rows\");\n});\n\nt(\"D5.4 the word unpaid, and every accusation like it, never reaches this card\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n // WIDER THAN IT WAS. [was: /unpaid|owes|has not paid|did not pay|non-payment/, which let the\n // most natural phrasing of the forbidden thing straight through: relabelling a row \"Not paid\"\n // shipped with every suite green.]\n // AND WIDER AGAIN, for the COLLECTIVE form. [was: every alternative named a single person. The\n // natural way to write the forbidden claim about a group names nobody at all: \"Nobody below has\n // paid a deposit.\" That went through untouched, and the dead-feed branch is exactly where\n // somebody would add it, because that branch already talks about everyone at once.]\n // AND WIDER A THIRD TIME, after an adversarial pass wrote 45 accusations that walked straight\n // through version two. The pattern in the misses: this regex had a vocabulary of REFUSAL\n // (\"failed to pay\", \"never paid\") and none of ABSENCE (\"no payment has been received\") or of\n // INVOICING (\"overdue\", \"past due\", \"balance due\", \"delinquent\") — and invoicing is the register\n // somebody reaches for first when they think they are being helpful. Two misses were pure\n // inflection: `owes?` matched \"owe\"/\"owes\" but not \"owed\"/\"owing\"; `hasn.t paid` matched only\n // the third person singular, so \"they haven't paid\" and \"he hadn't paid\" both passed.\n const ACCUSATION = new RegExp([\n /\\bunpaid\\b|\\bow(?:e|es|ed|ing)\\b|\\bnot paid\\b|\\bnever paid\\b|\\b(?:has|have|had)n.t paid\\b/,\n /\\bdid ?n.t pay\\b|\\bfailed to pay\\b|\\brefus\\w* to pay\\b|\\bwon.t pay\\b|\\bdeclined to pay\\b/,\n /non-?payment|\\boutstanding\\b|\\bin arrears\\b|\\bdebt\\b|\\bdelinquent\\b|\\bover-?due\\b|\\bpast due\\b/,\n /\\bbalance due\\b|\\bamount due\\b|\\bin default\\b|\\bbehind on\\b|\\bchas(?:e|ing)\\b|\\$[\\d,.]+\\s+due\\b/,\n // The collective forms: an accusation that names nobody at all.\n /\\b(?:nobody|no-? ?one|none|not one|not a single \\w+)\\b[^.]{0,40}?\\b(?:pa(?:id|ys?)|sent|settled)\\b/,\n // The same claim as a score. \"0 of 3 have paid\" names nobody and accuses everybody.\n /\\b\\d+ of (?:the |your )?\\d+\\b[^.]{0,40}?\\b(?:pa(?:id|ys?)|sent|settled)\\b/,\n // And absence-of-money phrased as a finding rather than as a limit of what we can see.\n /\\bno (?:payment|money|deposit|funds?)\\b[^.]{0,30}?\\b(?:received|come in|arrived)\\b/,\n ].map((r) => r.source).join(\"|\"), \"i\");\n // The only sentences allowed to use this language are the ones that DENY the accusation. They\n // are removed by exact text before scanning, and each is asserted PRESENT, so neither can be\n // quietly deleted to make room for a real one — a scrub whose target has vanished is a scrub\n // that protects nothing while still reading as a safeguard.\n const DISCLAIMER = \"This is a shortlist to look at rather than a list of people who owe you.\";\n const FEED_DENIAL = \"rather than that nobody has paid\";\n const DENIALS = [DISCLAIMER, FEED_DENIAL];\n // NORMALISED BEFORE ANY OF IT IS APPLIED. Round 15 got \"Jeffrey has not\\u00A0paid his deposit.\"\n // past the whole regex with ONE non-breaking space: a JS regex literal space matches U+0020 and\n // nothing else, so a single invisible character defeated every two-word and three-word\n // alternative at once — not paid, past due, balance due, amount due, in default, behind on, the\n // contraction forms. Ten of roughly twenty-five alternatives, invisibly, and it renders\n // identically to a space on Kim's phone. Non-breaking and zero-width characters are folded to\n // ordinary spaces and runs of whitespace collapsed, so the regex sees the sentence a reader sees.\n const flatten = (x) => String(x).replace(/[\\u00A0\\u2007\\u202F\\u2000-\\u200B\\uFEFF]/g, \" \").replace(/\\s+/g, \" \");\n const scrub = (x) => DENIALS.reduce((s, d) => s.split(d).join(\" \"), flatten(x));\n ok(h.includes(DISCLAIMER), \"the card dropped the sentence that says this is not a list of people who owe her money\");\n const deadSentence = H.depositSentence([{ state: \"none_seen\" }, { state: \"none_seen\" }], true);\n ok(deadSentence.includes(FEED_DENIAL), `the dead-feed sentence no longer denies the accusation, so scrubbing it guards nothing: ${deadSentence}`);\n ok(!ACCUSATION.test(scrub(h)), \"the card accuses somebody of not paying\");\n // AND ON GENERATED NOTES, not the hand-typed fixture ones. [was: DEPBLOB's notes are typed\n // strings, so this scanned my own prose rather than anything the code produces. Appending\n // \", so they still owe this one.\" to the already-counted branch reached Kim with the suite\n // green, despite \"owes?\" being in the ban.]\n const st = (day) => ({ contactId: \"c\", day, until: day, dogs: [\"R\"], dogCount: 1, bookedAt: \"2026-11-01 09:00:00\", window: \"W\" });\n const generated = [\n ...H.statusesForCustomer([st(\"2026-11-25\"), st(\"2026-12-22\")], [{ amount: 50, id: \"a\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]),\n H.statusFor(st(\"2026-11-25\"), null),\n H.statusFor(st(\"2026-11-25\"), []),\n H.statusFor(st(\"2026-11-25\"), [{ amount: 355, id: \"b\", at: \"2026-11-20T00:00:00Z\", kind: \"direct\" }]),\n H.statusFor({ ...st(\"2026-11-25\"), bookedAt: null }, []),\n ];\n ok(generated.length >= 5, \"no notes were generated, so this check inspected nothing\");\n for (const g of generated) {\n ok(!ACCUSATION.test(scrub(g.note)), `a generated note accuses somebody: ${g.note}`);\n const card = DASH.depositCard({ ...DEPBLOB, rows: [{ ...DEPBLOB.rows[0], state: g.state, note: g.note }] }, true, noAgo);\n ok(!ACCUSATION.test(scrub(card)), `a generated note accuses somebody once rendered: ${g.note}`);\n }\n\n // AND ACROSS THE CARD'S CONDITIONAL STRINGS, which a single healthy fixture never renders.\n // [was: every card scanned here was a spread of DEPBLOB, which hardcodes 2/2 calendars, 2/2\n // pick-ups, feedDead:false and a name that is not a test record. So FOUR strings were never\n // examined at all — the missed-calendar banner, the pick-up banner, the test-record warning and\n // the dead-feed sentence — and the banned words themselves went through them: \"those deposits\n // are unpaid\", \"those deposits are outstanding\", \"This one has not paid\", \"Nobody below has\n // paid a deposit\". Every combination is rendered now.]\n const testRow = { ...DEPBLOB.rows[0], name: \"help test\", state: \"none_seen\", note: H.statusFor(st(\"2026-11-25\"), []).note };\n const shapes = [];\n for (const calendars of [[2, 2], [1, 2], [0, 2]]) {\n for (const pickups of [[2, 2], [1, 2]]) {\n for (const feedDead of [false, true]) {\n for (const readFailures of [0, 2]) {\n for (const rows of [[testRow], [{ ...testRow, state: \"could_not_check\" }], DEPBLOB.rows, []]) {\n for (const ageMs of [60_000, 5 * 86_400_000]) {\n shapes.push({\n ...DEPBLOB, rows, feedDead, readFailures,\n calendarsRead: calendars[0], calendarsAsked: calendars[1],\n pickupsRead: pickups[0], pickupsAsked: pickups[1],\n at: new Date(Date.now() - ageMs).toISOString(),\n sentence: H.depositSentence(rows.map((r) => ({ state: r.state })), feedDead),\n });\n }\n }\n }\n }\n }\n }\n ok(shapes.length >= 100, `only ${shapes.length} card shapes were built, so this is not a sweep`);\n let renderedDeadFeed = 0;\n for (const shape of shapes) {\n const card = DASH.depositCard(shape, true, (x) => (Date.now() - Date.parse(x) > 86_400_000 ? \"5 days ago\" : \"just now\"));\n if (card.includes(FEED_DENIAL)) renderedDeadFeed++;\n ok(!ACCUSATION.test(scrub(card)),\n `a card accuses somebody: calendars ${shape.calendarsRead}/${shape.calendarsAsked}, pick-ups ${shape.pickupsRead}/${shape.pickupsAsked}, feedDead ${shape.feedDead}, ${shape.rows.length} rows`);\n }\n // The sweep must actually REACH the dead-feed sentence. Building 192 shapes proves nothing about\n // a branch none of them render, and this is the branch the whole widening above is aimed at.\n ok(renderedDeadFeed > 0, \"no card in the sweep rendered the dead-feed sentence, so that branch went unscanned\");\n // And the two states the card can be in besides \"here is a list\".\n for (const card of [DASH.depositCard(null, false, noAgo), DASH.depositCard(null, true, noAgo)]) {\n ok(!ACCUSATION.test(scrub(card)), \"the empty or unreadable card accuses somebody\");\n }\n ok(/Venmo, Zelle or a cheque/i.test(h), \"the card does not say a deposit may have been paid another way\");\n return scoped(shapes.length + generated.length * 2 + 7, \"rendered cards\");\n});\nt(\"D5.5 a customer whose payments could not be read is shown as unknown, not as nothing found\", () => {\n const h = DASH.depositCard(DEPBLOB, true, noAgo);\n ok(/Could not check/.test(h), \"an unreadable customer is not labelled as such\");\n ok(/could not be checked when this ran/i.test(h), \"the count of unknown rows is not stated\");\n return scoped(2, \"guarantees\");\n});\n\nt(\"D5.6 a calendar that did not answer is declared, so the list is not read as complete\", () => {\n const partial = { ...DEPBLOB, calendarsRead: 1, calendarsAsked: 2 };\n ok(/Not the whole picture/.test(DASH.depositCard(partial, true, noAgo)));\n ok(!/Not the whole picture/.test(DASH.depositCard(DEPBLOB, true, noAgo)), \"the warning shows when nothing is missing\");\n return scoped(2, \"cases\");\n});\n\nt(\"D5.7 a customer's name is escaped before it reaches the page\", () => {\n const nasty = { ...DEPBLOB, rows: [{ ...DEPBLOB.rows[0], name: '', note: \"hi\" }] };\n const h = DASH.depositCard(nasty, true, noAgo);\n ok(!/', note: \"hi\" }] };\n const h = DASH.depositCard(nasty, true, noAgo);\n ok(!/`}\n\n

${(d.recent || []).length < 40 ? \"Everything it has done so far\" : \"The last 40 things it did\"}

\n${rows}

When	What	Detail

\n\n${d.lastError && d.lastError.at && Date.now() - new Date(d.lastError.at).getTime() < 24 * 3600 * 1000 ? `

Something went wrong in the last 24 hours

Technical details for whoever fixes it, if this box is showing, tell Amir and include what is below.

${esc(JSON.stringify(d.lastError).slice(0, 1200))}

` : \"\"}\n\n

System version ${esc(d.engineVersion || \"?\")} · numbers read fresh when this page opened

\n`;\n}\n\n// ---- live self-test ------------------------------------------------------------------------------\n// Resolves the CRM credential exactly the way the engine does (env var first, then the puppy_config\n// blob) and pings the four endpoints the engine depends on. Reports status codes only, the token is\n// never returned, logged, or echoed. This exists because a stale credential is the failure mode that\n// looks identical to \"quiet\": the scheduler keeps ticking, every read fails, and nothing tells anyone.\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\n\nasync function resolveEngineToken(): Promise<{ token?: string; from: string }> {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return { token: env, from: \"env GHL_TOKEN\" };\n const cfg = await get(\"puppy_config\", null);\n if (cfg?.ghlToken) return { token: cfg.ghlToken, from: \"puppy_config blob\" };\n return { from: \"NOT FOUND\" };\n}\n\nasync function selfTest() {\n const { token, from } = await resolveEngineToken();\n const checks: any[] = [];\n const probe = async (name: string, url: string, ver: string, why: string) => {\n if (!token) return checks.push({ name, status: null, ok: false, why, note: \"no credential resolved\" });\n try {\n const r = await fetch(url, { headers: { Authorization: `Bearer ${token}`, Version: ver, Accept: \"application/json\" } });\n checks.push({ name, status: r.status, ok: r.status === 200, why });\n } catch (e) {\n checks.push({ name, status: null, ok: false, why, note: String(e).slice(0, 120) });\n }\n };\n await probe(\"read calendar bookings\", `${GHL}/calendars/events?locationId=${LOC}&calendarId=qHuYJ0NEqzibnoqf5Cw3&startTime=${Date.now() - 864e5}&endTime=${Date.now()}`, \"2021-04-15\", \"how it notices someone booked a Pup Talk\");\n await probe(\"read replies\", `${GHL}/conversations/search?locationId=${LOC}&limit=1`, \"2021-04-15\", \"how it pauses when someone writes back\");\n await probe(\"read contacts\", `${GHL}/contacts/?locationId=${LOC}&limit=1`, \"2021-07-28\", \"how it reads names and dog names\");\n await probe(\"read deals\", `${GHL}/opportunities/pipelines?locationId=${LOC}`, \"2021-07-28\", \"how it notices someone became a customer\");\n return { credentialFrom: from, allOk: checks.every((c) => c.ok), checks };\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const k = url.searchParams.get(\"k\") || \"\";\n const isAdmin = await authorised(k);\n const isViewer = !isAdmin && (await viewAuthorised(k));\n if (!isAdmin && !isViewer) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n if (isViewer) {\n // view key renders the dashboard only, no stop/go, no JSON, no selftest.\n const d = await collect();\n return new Response(page(d, k, { readonly: true }), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"selftest\") === \"1\") {\n return new Response(JSON.stringify(await selfTest(), null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n\n if (url.searchParams.get(\"stop\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: true, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n if (url.searchParams.get(\"go\") === \"1\") {\n const blob = await blobMod();\n await blob.setJSON(KILL_BLOB, { stopped: false, at: new Date().toISOString(), by: \"control-panel\" });\n return Response.redirect(`${url.origin}${url.pathname}?k=${encodeURIComponent(k)}`, 303);\n }\n\n const d = await collect();\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), {\n headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" },\n });\n }\n return new Response(page(d, k), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n",[354],"51bc55ba-f13d-4265-8a6f-81e07f6b53cf","aged.ts","58225aaa-8e77-11f1-90c9-1607ee4eb77e",15,["D",1785678976395],"// AGED-LIST SEGMENTER AND RELEASE PLANNER — built 2 Aug 2026.\n//\n// WHY THIS EXISTS\n// The plan of record was \"release the 3,206 dormant New Lead contacts by email, a few hundred a\n// week.\" Before building the machine, the audience was measured. It does not exist in the shape the\n// plan assumed:\n//\n// 3,426 opportunities sit in New Lead (not 3,206 — it grows ~12/day)\n// 177 (5.2%) have an email address\n// 766 (22.4%) have a phone number\n// 2,655 (77.5%) have NEITHER — they are Messenger-only contacts and cannot be emailed or texted\n//\n// Verified twice: once from the opportunity payload's embedded contact, then again by re-fetching\n// 25 of the \"no email\" contacts individually with GET /contacts/{id} — 0 of 25 had a hidden email.\n// So the email-only launch reaches 177 people, not three thousand.\n//\n// Age was also assumed wrong. Nothing in the backlog is older than 292 days; the oldest month is\n// October 2025 and only 328 rows are from 2025 at all. Median age is 109 days.\n//\n// This endpoint keeps that truth live rather than frozen in a document: it re-measures on demand,\n// segments the backlog by what can actually be done with each person, and produces the batch plan.\n//\n// WHAT IT WILL NOT DO\n// It never sends. It plans. Releasing anyone is a separate, deliberate act by a human, and the\n// copy for this path has not been approved by the client. `?k=…&plan=1` returns the batch list;\n// there is no endpoint here that hands that list to a sender.\n//\n// QUOTA (this is the R19 fix in miniature)\n// A full walk is 35 paginated calls. That is far too much to do on every 15-minute engine tick, so\n// the result is cached in the `aged_segments` blob with a timestamp and only recomputed when asked\n// or when older than CACHE_TTL. The engine never calls this; it is an operator tool.\n//\n// ?k= segment summary (cached)\n// ?k=&fresh=1 force a re-measure from the live CRM\n// ?k=&plan=1 the batch release plan\n// ?k=&f=json raw JSON of whichever of the above applies\n\n// ---- auth ------------------------------------------------------------------------------------\n// v2 (2 Aug, after the adversarial pass): the key is NOT in this file. val.town vals are PUBLIC —\n// proved by fetching this very source with no token — so a literal key here was readable by anyone\n// who found the val, which meant anyone could read Kim's data, stop her system, or trigger a run.\n// Only the SHA-256 digest lives in source now. The digest is useless to a reader and sufficient for\n// a comparison, so publishing the code no longer publishes the secret.\nconst KEY_SHA256 = \"48cd12465712045f70247da1689eeb198a4ce2d98416d8e52fb844581f044f15\";\n\nasync function sha256Hex(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function authorised(k: string): Promise {\n const override = Deno.env.get(\"NURTURE_ADMIN_KEY_SHA256\");\n const expected = override || KEY_SHA256;\n const got = await sha256Hex(k);\n // Constant-time over equal-length hex digests.\n if (got.length !== expected.length) return false;\n let d = 0;\n for (let i = 0; i < got.length; i++) d |= got.charCodeAt(i) ^ expected.charCodeAt(i);\n return d === 0;\n}\nconst GHL = \"https://services.leadconnectorhq.com\";\nconst LOC = \"BQHJ19uohldYe3eqA0bl\";\nconst PIPE = \"FXt1UpCVBufbF0v3pfyf\";\nconst NEW_LEAD = \"ccb18375-9aa1-40aa-a071-1581ca739533\";\nconst CACHE_KEY = \"aged_segments\";\nconst CACHE_TTL_MS = 12 * 3600 * 1000;\n\n// Batch policy. Email first, small, watching between batches — a burst to a stale list is how a\n// sending reputation dies, and this list is stale by construction.\nconst BATCH_SIZE = 60;\nconst BATCHES_PER_WEEK = 1;\n\nasync function blobMod() { return (await import(\"https://esm.town/v/std/blob\")).blob; }\n\n\nasync function token(): Promise {\n const env = Deno.env.get(\"GHL_TOKEN\");\n if (env) return env;\n const blob = await blobMod();\n const cfg = await blob.getJSON(\"puppy_config\").catch(() => null);\n return cfg?.ghlToken;\n}\n\nasync function walkNewLead() {\n const t = await token();\n if (!t) throw new Error(\"no CRM credential resolved\");\n const rows: any[] = [];\n let after: any = null, afterId: any = null, pages = 0;\n while (pages < 45) {\n let u = `${GHL}/opportunities/search?location_id=${LOC}&pipeline_id=${PIPE}&pipeline_stage_id=${NEW_LEAD}&limit=100`;\n if (after != null) u += `&startAfter=${after}&startAfterId=${afterId}`;\n const r = await fetch(u, { headers: { Authorization: `Bearer ${t}`, Version: \"2021-07-28\", Accept: \"application/json\" } });\n if (!r.ok) throw new Error(`opportunities/search ${r.status}`);\n const d = await r.json();\n const ops = d.opportunities ?? [];\n if (!ops.length) break;\n rows.push(...ops);\n pages++;\n after = d.meta?.startAfter; afterId = d.meta?.startAfterId;\n if (!after) break;\n }\n return { rows, pages };\n}\n\n// A lead nobody can reach is not a lead. A lead who only ever spoke on Messenger cannot be emailed or\n// texted at all — Meta's 24-hour messaging window closes that door, and pretending otherwise is how a\n// nurture plan produces a number that never arrives.\nfunction segment(rows: any[]) {\n const now = Date.now();\n const seg: Record = { emailable: [], phoneOnly: [], unreachable: [], excluded: [] };\n const ageBuckets: Record = { \"0-30d\": 0, \"31-90d\": 0, \"91-180d\": 0, \"181-365d\": 0, \"365d+\": 0 };\n const years: Record = {};\n const seenEmail = new Set(), seenPhone = new Set();\n let dupes = 0;\n\n for (const o of rows) {\n const c = o.contact ?? {};\n const email = String(c.email ?? \"\").trim().toLowerCase();\n const phone = String(c.phone ?? \"\").trim();\n const tags: string[] = (c.tags ?? []).map((x: string) => String(x).toLowerCase());\n const created = o.createdAt ? new Date(o.createdAt).getTime() : null;\n const ageDays = created ? Math.floor((now - created) / 86400000) : null;\n\n if (created) {\n const y = new Date(created).getUTCFullYear();\n years[y] = (years[y] ?? 0) + 1;\n const a = ageDays!;\n ageBuckets[a <= 30 ? \"0-30d\" : a <= 90 ? \"31-90d\" : a <= 180 ? \"91-180d\" : a <= 365 ? \"181-365d\" : \"365d+\"]++;\n }\n\n const rec = { contactId: o.contactId, name: c.name ?? null, email: email || null, phone: phone || null, ageDays, tags };\n\n // Exclusions come first and are absolute.\n const isSpam = tags.some((t) => t.includes(\"spam\"));\n const isCustomer = tags.includes(\"customer\") || tags.includes(\"subscription_active\");\n const alreadyOnAPath = tags.some((t) => t.startsWith(\"puppy-path\") || t.startsWith(\"path-\") || t.includes(\"nurture\"));\n if (isSpam || isCustomer || alreadyOnAPath) { seg.excluded.push({ ...rec, why: isSpam ? \"flagged spam\" : isCustomer ? \"already a customer\" : \"already on a nurture path\" }); continue; }\n\n // Same person twice is one person. Dedupe on the strongest identifier available.\n const k = email || phone;\n if (k) {\n const set = email ? seenEmail : seenPhone;\n if (set.has(k)) { dupes++; seg.excluded.push({ ...rec, why: \"duplicate of an earlier row\" }); continue; }\n set.add(k);\n }\n\n if (email) seg.emailable.push(rec);\n else if (phone) seg.phoneOnly.push(rec);\n else seg.unreachable.push(rec);\n }\n\n // Oldest first: they have waited longest and are the least likely to remember enquiring, so they\n // are also the batch most worth watching the opt-out rate on.\n seg.emailable.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n seg.phoneOnly.sort((a, b) => (b.ageDays ?? 0) - (a.ageDays ?? 0));\n\n return { seg, ageBuckets, years, dupes };\n}\n\nfunction plan(emailable: any[]) {\n const batches: any[] = [];\n for (let i = 0; i < emailable.length; i += BATCH_SIZE) {\n batches.push({\n batch: batches.length + 1,\n weekOffset: batches.length * (1 / BATCHES_PER_WEEK),\n size: emailable.slice(i, i + BATCH_SIZE).length,\n oldestAgeDays: emailable[i]?.ageDays ?? null,\n contactIds: emailable.slice(i, i + BATCH_SIZE).map((r) => r.contactId),\n });\n }\n return batches;\n}\n\nasync function measure(fresh: boolean) {\n const blob = await blobMod();\n if (!fresh) {\n const cached = await blob.getJSON(CACHE_KEY).catch(() => null);\n if (cached?.at && Date.now() - new Date(cached.at).getTime() < CACHE_TTL_MS) return { ...cached, fromCache: true };\n }\n const { rows, pages } = await walkNewLead();\n const { seg, ageBuckets, years, dupes } = segment(rows);\n const out = {\n at: new Date().toISOString(),\n fromCache: false,\n apiCallsUsed: pages,\n total: rows.length,\n counts: {\n emailable: seg.emailable.length,\n phoneOnly: seg.phoneOnly.length,\n unreachable: seg.unreachable.length,\n excluded: seg.excluded.length,\n duplicatesRemoved: dupes,\n },\n ageBuckets, years,\n batchPolicy: { size: BATCH_SIZE, perWeek: BATCHES_PER_WEEK, channel: \"email only\" },\n weeksToClear: Math.ceil(seg.emailable.length / (BATCH_SIZE * BATCHES_PER_WEEK)),\n emailable: seg.emailable,\n phoneOnly: seg.phoneOnly.slice(0, 200),\n excludedSample: seg.excluded.slice(0, 50),\n };\n await blob.setJSON(CACHE_KEY, out).catch(() => {});\n return out;\n}\n\nfunction pct(n: number, d: number) { return d ? `${((n / d) * 100).toFixed(1)}%` : \"0%\"; }\n\nfunction html(d: any) {\n const c = d.counts;\n const rows = (d.batches ?? []).slice(0, 12).map((b: any) =>\n `${b.batch}week +${b.weekOffset}${b.size}${b.oldestAgeDays ?? \"—\"} days`).join(\"\");\n return `Aged list — what is actually there\n\n

The dormant list — what is actually in it

Measured from the live CRM ${d.fromCache ? \"(cached \" + String(d.at).slice(0, 16).replace(\"T\", \" \") + \" UTC)\" : \"just now\"} · ${d.apiCallsUsed ?? \"—\"} API calls

The plan assumed roughly 3,200 people who could be emailed. They cannot.\nOf ${d.total} contacts sitting in New Lead, ${c.emailable} have an email address —\n${pct(c.emailable, d.total)}. ${c.unreachable} (${pct(c.unreachable, d.total)}) have neither an email\nnor a phone number: they only ever spoke through Messenger, and Meta's 24-hour rule closes that door.

Who can actually be contacted

\n\n\n\n\n

Segment	Count	Share	What can be done
Has an email	${c.emailable}	${pct(c.emailable, d.total)}	The email release. This is the real audience.
Phone only	${c.phoneOnly}	${pct(c.phoneOnly, d.total)}	SMS — held until numbers are validated. Stale numbers get a business flagged by carriers.
Neither	${c.unreachable}	${pct(c.unreachable, d.total)}	Nothing by email or text. Reachable only inside Messenger, within Meta's window.
Excluded	${c.excluded}	${pct(c.excluded, d.total)}	Already customers, already on a path, flagged spam, or duplicates.

How old it really is

\n${Object.entries(d.ageBuckets || {}).map(([k, v]) => ``).join(\"\")}

Age	Count
${k}	${v}

By year created: ${Object.entries(d.years || {}).map(([k, v]) => `${k} ${v}`).join(\" · \")}. Nothing in this list is more than a year old.

\n${rows ? `

The release plan

${rows}

Batch	When	People	Oldest in batch

${d.batchPolicy.size} per batch, ${d.batchPolicy.perWeek} batch per week, email only, oldest first — ${d.weeksToClear} week(s) to work through everyone who can be reached.

` : \"\"}\n

Nothing here sends anything. This page measures and plans. Releasing a batch is a separate deliberate action, and the copy for this path has not been approved yet.

`;\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n if (!(await authorised(url.searchParams.get(\"k\") || \"\"))) {\n return new Response(\"Not found\", { status: 401, headers: { \"content-type\": \"text/plain\" } });\n }\n try {\n const d: any = await measure(url.searchParams.get(\"fresh\") === \"1\");\n if (url.searchParams.get(\"plan\") === \"1\") d.batches = plan(d.emailable ?? []);\n if (url.searchParams.get(\"f\") === \"json\") {\n return new Response(JSON.stringify(d, null, 2), { headers: { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" } });\n }\n if (!d.batches) d.batches = plan(d.emailable ?? []);\n return new Response(html(d), { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e).slice(0, 500) }, null, 2), { status: 500, headers: { \"content-type\": \"application/json\" } });\n }\n}\n",[361],"9819cd9e-a633-4046-96bb-ff64f836f9d8","SOURCE-BUNDLE.part9.txt","5cc7c38a-91cc-11f1-86f1-1607ee4eb77e",686,["D",1786387549422],29,"THE DOGS SPOT — SOURCE BUNDLE (part 9 of 17)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (8 of 61 files)\n tests/run-all.mjs 16104 bytes b067deb1fc22\n tests/slow-track.test.mjs 9404 bytes 0bc57258b304\n tests/sms-length.test.mjs 2793 bytes 4b42ded930a4\n tests/stories.test.mjs 3378 bytes 36c5afe09c12\n tests/taper-test.ts 6922 bytes 3ae9fc044871\n scripts/blueprint.py 19291 bytes 804ea6084df6\n scripts/build.mjs 4893 bytes f21f37e458d0\n scripts/bundle.mjs 12289 bytes 9d6744dbca87\n\n================================================================================================\n=====FILE tests/run-all.mjs =====\n// THE RUNNER. Discovers every suite in this folder, runs it, and refuses to report green on\n// anything it did not actually observe pass.\n//\n// [was: a shell glob over tests/*.mjs. taper-test.ts sat at 28/29 RED for two days while the glob\n// reported \"all green\", because a .ts file is not a .mjs file. Discovery is by folder listing now,\n// and a file it cannot run is a FAILURE rather than a skip.]\n//\n// Three rules, all learned the hard way:\n// 1. A suite that will not parse or start is a RED, not a skip.\n// 2. A suite that reports zero assertions is a RED. Blind is not clean.\n// 3. The exit code is the truth. Text saying \"passed\" is not consulted.\nimport { readdirSync, statSync } from \"node:fs\";\nimport { spawnSync } from \"node:child_process\";\nimport { join, dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst HERE = dirname(fileURLToPath(import.meta.url));\n\n// EVERY executable file in this folder is a suite unless it is named below as scaffolding.\n// Not a naming convention: a convention is a thing a future file can quietly fail to follow.\n// [was: /\\.(test\\.mjs|test\\.ts)$/ — which excluded `taper-test.ts` on the hyphen, the same class\n// of miss as the shell glob it replaced. Caught on this runner's first real run.]\nconst RUNNABLE = /\\.(mjs|ts|js|cjs)$/;\n// Scaffolding, named explicitly. Adding to this list is a deliberate act with a reason attached.\nconst NOT_A_SUITE = new Set([\n \"_harness.mjs\", // shared assertions\n \"run-all.mjs\", // this file\n \"negative-controls.mjs\", // run separately: it deliberately breaks things and expects reds\n \"harness.mjs\", // v1 harness, superseded by _harness.mjs, kept for the old .ts suite\n \"claims-registry.mjs\",// data, not assertions: cross-artifact.test.mjs is what tests it\n]);\n\nconst isSuite = (f) => !NOT_A_SUITE.has(f) && RUNNABLE.test(f);\n\nconst files = readdirSync(HERE)\n .filter((f) => statSync(join(HERE, f)).isFile())\n .sort();\n\nconst suites = files.filter(isSuite);\n// Loud about what it declined to run, so \"12 suites\" can be checked against the folder.\nconst skipped = files.filter((f) => !isSuite(f) && !NOT_A_SUITE.has(f));\n\nif (!suites.length) {\n console.log(\"RUNNER FAILURE: found zero suites to run. A runner that runs nothing is not a pass.\");\n process.exit(1);\n}\n\n// REBUILD FIRST, ALWAYS.\n//\n// Every behavioural assertion in this project imports ../build/*.js. Every structural assertion\n// reads ../engine/*.ts. Nothing checked that those two were the same code. On 6 August an\n// adversarial pass deleted the payment-allocation logic from engine/holiday-deposits.ts — the\n// exact fault a negative control exists to catch — ran this runner WITHOUT rebuilding, and got\n// \"270 assertions passed, RESULT: GREEN\". A money bug behind a green wall.\n//\n// So the build is not a thing you remember to do. It is step one of running the tests, and a\n// build that fails is a RED, not a warning.\n{\n const b = spawnSync(\"node\", [join(dirname(HERE), \"scripts\", \"build.mjs\")], { encoding: \"utf8\", timeout: 300_000 });\n if (b.status !== 0) {\n console.log(\"RUNNER FAILURE: the build failed, so the suites would have been testing stale code.\");\n console.log(`${b.stdout ?? \"\"}${b.stderr ?? \"\"}`.trim().slice(0, 1200));\n process.exit(1);\n }\n console.log(\"built engine/ -> build/ before running anything\");\n}\n\n// TYPECHECK, after the build and before the suites. esbuild strips types without checking them,\n// so a field added to a type and missed in two object literals built clean and tested green on\n// 6 August. Found by an adversarial pass, not by anything here.\n{\n const t = spawnSync(\"node\", [join(dirname(HERE), \"scripts\", \"typecheck.mjs\")], { encoding: \"utf8\", timeout: 300_000 });\n const out = `${t.stdout ?? \"\"}${t.stderr ?? \"\"}`.trim();\n console.log(out.split(\"\\n\")[0] ?? \"typecheck: no output\");\n if (t.status !== 0) {\n console.log(\"RUNNER FAILURE: the engine does not typecheck.\");\n console.log(out.slice(0, 1200));\n process.exit(1);\n }\n}\n\nconst runners = { \".ts\": [\"npx\", [\"--yes\", \"tsx\"]], \".mjs\": [\"node\", []] };\nconst runnerFor = (f) => (f.endsWith(\".ts\") ? runners[\".ts\"] : runners[\".mjs\"]);\n\nlet redSuites = 0, totalPass = 0, totalFail = 0;\nconst checksBySuite = {};\nconst assertsBySuite = {};\nconst rows = [];\n\nfor (const f of suites) {\n const [cmd, pre] = runnerFor(f);\n const r = spawnSync(cmd, [...pre, join(HERE, f)], { encoding: \"utf8\", cwd: dirname(HERE), timeout: 120_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n const m = out.match(/=== RESULT: (\\d+) passed, (\\d+) failed(?:, (\\d+) checks)?(?:, (\\d+) assertions)? ===/);\n\n let verdict, pass = 0, fail = 0;\n if (r.error || r.status === null) {\n verdict = `COULD NOT RUN (${r.error?.message ?? \"killed\"})`;\n } else if (!m) {\n // No result line at all: it crashed, or it is not a suite shaped like our suites.\n verdict = `NO RESULT LINE (exit ${r.status})`;\n } else {\n pass = Number(m[1]); fail = Number(m[2]);\n checksBySuite[f] = Number(m[3] ?? 0);\n assertsBySuite[f] = Number(m[4] ?? 0);\n totalPass += pass; totalFail += fail;\n if (pass + fail === 0) verdict = \"ZERO ASSERTIONS (blind, not clean)\";\n else if (fail > 0 || r.status !== 0) verdict = `${fail} FAILED`;\n else verdict = `${pass} passed`;\n }\n\n const green = /passed$/.test(verdict) && !/FAILED/.test(verdict);\n if (!green) {\n redSuites++;\n console.log(`\\n--- ${f} ---`);\n console.log(out.trim().split(\"\\n\").filter((l) => /^FAIL|Error|^\\s{6}/.test(l)).slice(0, 20).join(\"\\n\") || out.trim().slice(0, 1500));\n }\n rows.push([green ? \"OK \" : \"RED \", f, verdict]);\n}\n\nconsole.log(\"\\n================ ALL SUITES ================\");\nfor (const [flag, f, v] of rows) console.log(`${flag} ${f.padEnd(30)} ${v}`);\nif (skipped.length) console.log(`\\nNOT RUN (does not match ${RUNNABLE}): ${skipped.join(\", \")}`);\nconsole.log(`\\n${suites.length} suites, ${totalPass} assertions passed, ${totalFail} failed, ${redSuites} suites red`);\n\nif (redSuites) {\n console.log(\"\\nRESULT: RED\");\n process.exit(1);\n}\n// A SUITE THAT LOSES TESTS MUST GO RED. Deleting the seven assertions that guard the money bug's\n// fourth return took holiday-deposits from 69 to 62 and this runner still printed GREEN: the only\n// floor was a global one, and nothing compared a suite against itself. The floors below are the\n// counts observed passing; raising one is a deliberate act, lowering one is a conversation.\n// [The numbers are not a target. They are a ratchet: tests get added, and a drop means somebody\n// removed a guarantee, which is exactly the move nobody ever announces.]\n// CHECK FLOORS, alongside the test-count floors. A test can pass while inspecting almost nothing;\n// these are the totals each suite reports through scoped(), so hollowing a test out shows up even\n// though the test still says PASS.\nconst CHECK_FLOORS = {\n \"holiday-deposits.test.mjs\": 1544,\n \"deposits-collect.test.mjs\": 136,\n \"dashboard.test.mjs\": 2489,\n};\n// ASSERTION FLOORS. The one count in this project that a test author cannot type: it is\n// incremented inside ok() and eq() themselves. CHECK_FLOORS above is the number a test PASSES to\n// scoped(), and on 7 August that was proved worthless against the failure it was written for —\n// H1's five eq() calls were deleted, `return scoped(5, \"years\")` was left standing, and both the\n// test count and the check count came back byte-identical to the honest run. This floor moves.\nconst ASSERT_FLOORS = {\n \"cadence.test.mjs\": 54,\n \"cross-artifact.test.mjs\": 244,\n \"dashboard.test.mjs\": 891,\n \"deposits-collect.test.mjs\": 155,\n \"detect.test.mjs\": 115,\n \"facts.test.mjs\": 44,\n \"holiday-deposits.test.mjs\": 1594,\n \"kim-copy.test.mjs\": 25,\n \"registry.test.mjs\": 31,\n \"render.test.mjs\": 23,\n \"report-logic.test.mjs\": 38,\n \"slow-track.test.mjs\": 288,\n \"sms-length.test.mjs\": 81,\n \"stories.test.mjs\": 71,\n // taper-test.ts runs on the v1 harness (tests/harness.mjs) and reports no assertion count.\n // Its own hollowing guard lives there instead; see the note in that file.\n};\n// EVERY SUITE HAS A FLOOR. [was: eight of fifteen. The other seven — cadence, facts, registry,\n// render, report-logic, sms-length, stories — were protected only by the global `totalPass < 100`\n// backstop, which had 220 assertions of slack. Deleting five of stories.test.mjs's eight tests\n// dropped the project total from 320 to 315 and printed GREEN.]\nconst FLOORS = {\n \"holiday-deposits.test.mjs\": 88,\n \"deposits-collect.test.mjs\": 38,\n \"dashboard.test.mjs\": 67,\n \"cross-artifact.test.mjs\": 10,\n \"detect.test.mjs\": 19,\n \"kim-copy.test.mjs\": 10,\n \"slow-track.test.mjs\": 14,\n \"taper-test.ts\": 25,\n \"cadence.test.mjs\": 7,\n \"facts.test.mjs\": 11,\n \"registry.test.mjs\": 7,\n \"render.test.mjs\": 8,\n \"report-logic.test.mjs\": 14,\n \"sms-length.test.mjs\": 6,\n \"stories.test.mjs\": 8,\n};\n// A FLOOR ON A SUITE THAT DID NOT RUN GUARDS NOTHING.\n//\n// Every floor above is applied by looking a suite up in `rows`, and `rows` only contains suites\n// discovery actually found. So a suite that vanishes does not fail its floor — it is not there to\n// be measured, and every filter below quietly skips it. Proved three ways on 7 August, each\n// ending in `RESULT: GREEN, exit 0` with a whole suite's coverage gone:\n// delete detect.test.mjs -> 14 suites, GREEN, no mention of it\n// rename it to detect.test.mjs.bak -> GREEN, one passive \"NOT RUN\" line that changes nothing\n// add it to NOT_A_SUITE -> GREEN, and it appears NOWHERE in the output at all\n// This is the same shape as the stale-build hole and the truncated-control-file hole: the runner\n// reporting on work it never did.\n{\n const expected = new Set([...Object.keys(FLOORS), ...Object.keys(CHECK_FLOORS), ...Object.keys(ASSERT_FLOORS)]);\n const missing = [...expected].filter((f) => !rows.some(([, name]) => name === f)).sort();\n if (missing.length) {\n console.log(\"\\nRESULT: RED — a suite that has a floor did not run at all.\");\n console.log(\"It was deleted, renamed out of the runnable pattern, or added to NOT_A_SUITE. A floor\");\n console.log(\"cannot fail a suite that is not there: this is the check that notices it is not there.\");\n for (const f of missing) console.log(` ${f}: has a floor, was never run`);\n process.exit(1);\n }\n console.log(`scaffolding deliberately excluded from discovery (${NOT_A_SUITE.size}): ${[...NOT_A_SUITE].sort().join(\", \")}`);\n}\n{\n const short = rows.filter(([, f]) => FLOORS[f] !== undefined)\n .map(([, f, v]) => [f, Number((v.match(/^(\\d+) passed/) || [])[1] ?? 0)])\n .filter(([f, n]) => n < FLOORS[f]);\n const thin = Object.entries(CHECK_FLOORS)\n .filter(([f, n]) => (checksBySuite[f] ?? 0) < n)\n .map(([f, n]) => [f, checksBySuite[f] ?? 0, n]);\n const hollow = Object.entries(ASSERT_FLOORS)\n .filter(([f, n]) => (assertsBySuite[f] ?? 0) < n)\n .map(([f, n]) => [f, assertsBySuite[f] ?? 0, n]);\n if (hollow.length) {\n console.log(\"\\nRESULT: RED — a suite still passes but is RUNNING FEWER ASSERTIONS than it used to.\");\n console.log(\"This count is incremented inside ok() and eq(), so it is the one number a hollowed-out\");\n console.log(\"test cannot keep steady. If assertions were deliberately merged or removed, move the\");\n console.log(\"floor in run-all.mjs and say why.\");\n for (const [f, n, floor] of hollow) console.log(` ${f}: ${n} assertions ran, floor is ${floor}`);\n process.exit(1);\n }\n if (thin.length) {\n console.log(\"\\nRESULT: RED — a suite still passes but is inspecting LESS than it used to.\");\n console.log(\"A test can be hollowed out to a bare `return scoped(1, ...)` and still say PASS; this is\");\n console.log(\"the total work its checks report. If the drop is deliberate, change the floor and say why.\");\n for (const [f, n, floor] of thin) console.log(` ${f}: ${n} checks now, floor is ${floor}`);\n process.exit(1);\n }\n if (short.length) {\n console.log(\"\\nRESULT: RED — a suite has FEWER assertions than it used to. Guarantees do not\");\n console.log(\"get removed quietly; if this is deliberate, change the floor in run-all.mjs and say why.\");\n for (const [f, n] of short) console.log(` ${f}: ${n} now, floor is ${FLOORS[f]}`);\n process.exit(1);\n }\n}\n\nif (totalPass < 100) {\n console.log(`\\nRESULT: RED — only ${totalPass} assertions across the whole project. That is not a suite, it is a gesture.`);\n process.exit(1);\n}\n\n// THE MONEY GUARDS, RUN EVERY TIME.\n//\n// Two things this replaces. First: negative-controls.mjs is not run here (it deliberately breaks\n// things and expects reds), so nothing would notice if it stopped working — on 6 August an edit\n// truncated that file, deleting the whole runner, and it then printed NOTHING and exited 0, which\n// reads exactly like \"all controls passed\". Second, and worse: a test can be HOLLOWED OUT to a\n// bare `return scoped(3, \"allocations\")` and still print PASS, with the assertion count and the\n// self-reported check count both unchanged. Floors cannot see that. A control can: it injects the\n// fault and demands that named test go red, and a hollow test cannot go red.\n//\n// So the controls guarding the bug that has come back six times run on every single test run.\n// They cost about half a minute. The other ~155 still need `node tests/negative-controls.mjs`.\n//\n// EACH IS PINNED BY FINGERPRINT, NOT BY NAME. The fingerprint is a hash of the fault a control\n// actually injects — file, find, replace, suite and the test it demands go red. [was: the name\n// alone. So the name could be left untouched and the injection underneath it swapped for an\n// unrelated one, and this block kept printing \"7 money guards each proved to still fire\" for a\n// guard that no longer had anything to do with the money bug. Done on 7 August, in one edit, to\n// the control named \"a row is labelled 'Not paid' on Kim's card\" — after which the string\n// \"Not paid\" survived in the control file only inside that name.]\nconst CRITICAL = [\n [\"the allocator debits one $50 while the rule clears on a lump sum\", \"350476142ee4\"],\n [\"one $50 payment settles every holiday stay that customer has\", \"0162bb23668a\"],\n [\"a backfill record from months away is folded into a payment as the same money\", \"563d872d5b35\"],\n [\"a row denies a payment that is sitting in its own window\", \"20b84610424f\"],\n [\"the display list is the collapsed one, so a folded payment vanishes off the row\", \"57e730475b81\"],\n [\"an accusation is added to the note cell, gated on a row state\", \"cd8f1069c9c2\"],\n [\"a row is labelled 'Not paid' on Kim's card\", \"8c99365509f4\"],\n];\n{\n let bad = 0;\n for (const [name, fp] of CRITICAL) {\n const r = spawnSync(\"node\", [join(HERE, \"negative-controls.mjs\"), \"--only\", name],\n { encoding: \"utf8\", cwd: dirname(HERE), timeout: 240_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n const m = out.match(/=== RESULT: (\\d+) passed, (\\d+) failed ===/);\n if (!m) {\n console.log(`\\nRESULT: RED — the control suite printed no result for \"${name}\".`);\n console.log(out.trim().slice(0, 600) || \"(no output at all)\");\n process.exit(1);\n }\n if (Number(m[1]) !== 1 || Number(m[2]) !== 0) {\n console.log(`\\nRESULT: RED — the guard for \"${name}\" no longer fires: ${m[0]}`);\n console.log(out.split(\"\\n\").filter((l) => /^\\s+/.test(l)).slice(0, 6).join(\"\\n\"));\n bad++;\n continue;\n }\n if (!out.includes(`[fp:${fp}]`)) {\n console.log(`\\nRESULT: RED — the control named \"${name}\" passed, but it is not the same control.`);\n console.log(`Expected fingerprint ${fp}; got ${(out.match(/fp:[0-9a-f]+/) || [\"none\"])[0]}. The name was kept`);\n console.log(\"and the fault underneath it changed, so this line has been reporting on the wrong guarantee.\");\n bad++;\n }\n }\n if (bad) {\n console.log(\"\\nA guarantee that cannot be made to fail is not guarded. Fix the test, not the control.\");\n process.exit(1);\n }\n console.log(`\\ncontrol harness: alive, and ${CRITICAL.length} money guards each proved to still fire`);\n}\n\nconsole.log(\"\\nRESULT: GREEN\");\n\n\n=====FILE tests/slow-track.test.mjs =====\n// THE SLOW TRACK. Kim signed this off, so its shape is now a promise rather than a preference.\n// 4 weekly, 13 fortnightly, then monthly forever, keyed to the calendar so seasonal copy lands in\n// season. These tests exist because the failure mode here is silent: a bad offset does not throw,\n// it just sends August's copy in February, or sends the same email twice in one month.\nimport * as T from \"../build/taper.js\";\nimport * as S from \"../build/stories.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"slow-track\");\n\nconst HOUR = 1;\nconst WEEK = 168;\nconst FORTNIGHT = 336;\n\nt(\"T1 the track is the shape Kim signed off: 4 weekly, 13 fortnightly, then monthly\", () => {\n eq(T.SLOW_WEEKLY_COUNT, 4);\n eq(T.SLOW_FORTNIGHTLY_COUNT, 13);\n eq(T.SLOW_WEEKLY.length, 4, \"weekly bank does not match its declared count\");\n eq(T.SLOW_FORTNIGHTLY.length, 13, \"fortnightly bank does not match its declared count\");\n eq(T.SLOW_MONTHLY_BANK.length, 12, \"the monthly bank must cover every calendar month\");\n return scoped(4 + 13 + 12, \"templates\");\n});\n\nt(\"T2 every phase boundary hands over to the next without a gap or an overlap\", () => {\n const phases = [];\n for (let n = 0; n < 40; n++) phases.push(T.nextSlowTouch(n).phase);\n eq(phases.slice(0, 4), [\"weekly\", \"weekly\", \"weekly\", \"weekly\"]);\n eq(phases.slice(4, 17), Array(13).fill(\"fortnightly\"));\n ok(phases.slice(17).every((p) => p === \"monthly\"), \"the track stops being monthly at some point\");\n return scoped(40, \"touches walked\");\n});\n\nt(\"T3 offsets only ever move forward, and by the interval the phase promises\", () => {\n let prev = 0;\n const gaps = [];\n for (let n = 0; n < 40; n++) {\n const { offsetHours } = T.nextSlowTouch(n);\n ok(offsetHours > prev, `touch ${n} at ${offsetHours}h does not come after touch ${n - 1} at ${prev}h`);\n gaps.push(offsetHours - prev);\n prev = offsetHours;\n }\n eq(gaps.slice(0, 4), [WEEK, WEEK, WEEK, WEEK], \"the weekly phase is not weekly\");\n eq(gaps.slice(5, 17), Array(12).fill(FORTNIGHT), \"the fortnightly phase is not fortnightly\");\n eq(gaps.slice(18, 40), Array(22).fill(T.SLOW_MONTHLY_INTERVAL_HOURS), \"the monthly phase is not monthly\");\n return scoped(40, \"intervals\");\n});\n\nt(\"T4 the handover gaps are sane rather than merely forward\", () => {\n // The two seams. Neither is allowed to fire same-day or leave a month of silence.\n const seamA = T.nextSlowTouch(4).offsetHours - T.nextSlowTouch(3).offsetHours;\n const seamB = T.nextSlowTouch(17).offsetHours - T.nextSlowTouch(16).offsetHours;\n ok(seamA >= 24 * HOUR, `weekly-to-fortnightly seam is ${seamA}h: same-day double send`);\n ok(seamA <= 2 * FORTNIGHT, `weekly-to-fortnightly seam is ${seamA}h: a silent month`);\n ok(seamB >= 24 * HOUR, `fortnightly-to-monthly seam is ${seamB}h: same-day double send`);\n ok(seamB <= 2 * T.SLOW_MONTHLY_INTERVAL_HOURS, `fortnightly-to-monthly seam is ${seamB}h: a silent quarter`);\n return scoped(2, \"seams\");\n});\n\nt(\"T5 a weekly or fortnightly touch always hands back a real template\", () => {\n let checked = 0;\n for (let n = 0; n < T.SLOW_WEEKLY_COUNT + T.SLOW_FORTNIGHTLY_COUNT; n++) {\n const { template, phase } = T.nextSlowTouch(n);\n ok(template && typeof template === \"object\", `${phase} touch ${n} handed back no template`);\n ok(template.id, `${phase} touch ${n} has no id`);\n ok(template.subject || template.bodyTemplate, `${template.id} is empty`);\n checked++;\n }\n return scoped(checked, \"templates resolved\");\n});\n\nt(\"T6 a monthly touch defers to the calendar rather than carrying a template\", () => {\n for (let n = 17; n < 30; n++) {\n eq(T.nextSlowTouch(n).template, null, `monthly touch ${n} carries a fixed template: seasonal copy will drift`);\n }\n return scoped(13, \"monthly touches\");\n});\n\nt(\"T7 every month of the year resolves to its own template\", () => {\n const ids = new Set();\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 15, 12, 0, 0));\n const tpl = T.monthlyTemplateFor(d);\n ok(tpl && tpl.id, `month ${m + 1} has no template`);\n ids.add(tpl.id);\n }\n eq(ids.size, 12, \"two calendar months share a template: one of them is out of season\");\n return scoped(12, \"months\");\n});\n\nt(\"T8 the same monthly email never goes out twice in a row\", () => {\n let guarded = 0;\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 28, 12, 0, 0));\n const natural = T.monthlyTemplateFor(d);\n const served = T.monthlyTemplateAvoidingRepeat(d, natural.id);\n ok(served.id !== natural.id, `month ${m + 1} served ${served.id} twice running`);\n guarded++;\n }\n // and when the last send was something else, it serves the natural one\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 3, 12, 0, 0));\n eq(T.monthlyTemplateAvoidingRepeat(d, \"something-else\").id, T.monthlyTemplateFor(d).id,\n `month ${m + 1} dodged when it had no reason to`);\n }\n return scoped(guarded * 2, \"month/last-send pairs\");\n});\n\nt(\"T9 no slow-track copy carries a word Kim has struck out\", () => {\n const banned = [/\\bdaycare\\b/i, /\\bday care\\b/i, /\\bdiscovery call\\b/i, /\\btoilet\\b/i, /\\bgarden\\b/i,\n /\\bwhilst\\b/i, /\\benquir/i, /\\bcolour/i, /\\bfavourite/i, /\\brecognise/i, /\\bapologise/i, /\\bcentre\\b/i];\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const hits = [];\n for (const m of all) {\n const text = [m.subject ?? \"\", m.previewText ?? \"\", m.bodyTemplate ?? \"\"].join(\"\\n\");\n for (const b of banned) if (b.test(text)) hits.push(`${m.id}: ${b.source}`);\n }\n eq(hits, []);\n return scoped(all.length * banned.length, \"message/word pairs\");\n});\n\nt(\"T10 no slow-track message leaks an unresolved story token\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const bad = all\n .filter((m) => /\\{\\{STORY:/.test(S.resolveStories([m.subject ?? \"\", m.bodyTemplate ?? \"\"].join(\"\\n\"))))\n .map((m) => m.id);\n eq(bad, []);\n return scoped(all.length, \"slow-track messages\");\n});\n\nt(\"T11 every slow-track message has an id, and no two share one\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n const ids = all.map((m) => m.id);\n ok(ids.every(Boolean), \"a message has no id: the journal cannot record what was sent\");\n const dupes = ids.filter((id, i) => ids.indexOf(id) !== i);\n eq(dupes, [], \"duplicate ids: two different messages would log as the same send\");\n return scoped(ids.length, \"ids\");\n});\n\n// [was: T12 asserted the slow track is email-only. It is not — it alternates email and SMS on\n// purpose, and the assertion was my guess rather than anything read off the track. It failed on\n// slow_w-2 the first time it ran, which is the only reason the guess got caught. The check below\n// tests what the track actually promises.]\nt(\"T12 every message declares a channel, and carries what that channel needs\", () => {\n const all = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY, ...T.SLOW_MONTHLY_BANK];\n let checked = 0;\n for (const m of all) {\n ok(m.channel === \"email\" || m.channel === \"sms\", `${m.id} has channel ${JSON.stringify(m.channel)}`);\n if (m.channel === \"email\") {\n ok((m.subject ?? \"\").trim().length > 0, `${m.id} is an email with no subject line`);\n ok((m.bodyTemplate ?? \"\").trim().length > 40, `${m.id} is an email with no body`);\n } else {\n eq((m.subject ?? \"\").trim(), \"\", `${m.id} is an SMS carrying a subject line nobody will see`);\n ok((m.bodyTemplate ?? \"\").trim().length > 0, `${m.id} is an empty SMS`);\n }\n checked++;\n }\n return scoped(checked, \"messages\");\n});\n\nt(\"T13 two text messages never land back to back\", () => {\n // Send order for the fixed phases, calendar order for the monthly bank (which wraps Dec to Jan).\n const linear = [...T.SLOW_WEEKLY, ...T.SLOW_FORTNIGHTLY];\n const monthly = [...T.SLOW_MONTHLY_BANK, T.SLOW_MONTHLY_BANK[0]]; // wrap\n let pairs = 0;\n const run = (seq, label) => {\n for (let i = 1; i < seq.length; i++) {\n ok(!(seq[i - 1].channel === \"sms\" && seq[i].channel === \"sms\"),\n `${label}: ${seq[i - 1].id} then ${seq[i].id} are both texts`);\n pairs++;\n }\n };\n run(linear, \"fixed phases\");\n run(monthly, \"monthly bank\");\n // The seam into the monthly phase. The first monthly send can land in ANY calendar month, so the\n // only way to guarantee the seam is for the last fixed-phase message to be an email.\n ok(linear[linear.length - 1].channel === \"email\",\n `the last fixed-phase message (${linear[linear.length - 1].id}) is a text, so the seam into the monthly phase can double up`);\n pairs++;\n return scoped(pairs, \"consecutive pairs\");\n});\n\nt(\"T14 the dodge for a repeated month can never serve two texts in a row\", () => {\n // monthlyTemplateAvoidingRepeat serves NEXT month when this month's was the last thing sent.\n // If the bank ever stopped alternating, that dodge could hand back a second text.\n let checked = 0;\n for (let m = 0; m < 12; m++) {\n const d = new Date(Date.UTC(2026, m, 28, 12, 0, 0));\n const natural = T.monthlyTemplateFor(d);\n const dodged = T.monthlyTemplateAvoidingRepeat(d, natural.id);\n ok(!(natural.channel === \"sms\" && dodged.channel === \"sms\"),\n `a repeat in month ${m + 1} dodges from ${natural.id} to ${dodged.id}: two texts running`);\n checked++;\n }\n return scoped(checked, \"dodges\");\n});\n\ndone();\n\n\n=====FILE tests/sms-length.test.mjs =====\n// SMS LENGTH, EVERY TRACK. v2.0, 5 Aug 2026.\n// The 320-character rule was enforced on the 21-day sequence and its branches, and on nothing else.\n// A Halloween text sat at 354 as sent, 34 over, splitting into two billed segments every October.\n// Worse: the first version of this check read `E.TAPER_MESSAGES`, a name that does not exist, so it\n// measured zero messages and printed \"all within limit\". T0 is the guard against that.\nimport * as E from \"../build/engine.js\";\nimport { suite, ok, scoped, TRACKS, allMessages } from \"./_harness.mjs\";\nconst { t, done } = suite(\"sms\");\n\nconst LIMIT = 320, OPTOUT = \"\\n\\nReply STOP to stop these texts.\", LONG_NAME = \"Christopher\";\nconst render = (m) => (m.bodyTemplate.replaceAll(\"{{FIRST_NAME}}\", LONG_NAME)\n .replace(/\\{\\{STORY:[^}]+\\}\\}/g, \"\").replace(/\\n{3,}/g, \"\\n\\n\").trim() + OPTOUT);\nconst sms = () => allMessages(E).filter((m) => m.channel === \"sms\");\n\nt(\"T0 every named track is exported and non-empty\", () => {\n for (const k of TRACKS) { ok(Array.isArray(E[k]), `${k} not exported: a check over it would silently pass`); ok(E[k].length, `${k} empty`); }\n return scoped(TRACKS.length, \"tracks\");\n});\nt(\"T1 no SMS exceeds 320 as actually sent, worst-case name\", () => {\n const over = sms().filter((m) => render(m).length > LIMIT).map((m) => `${m.track}/${m.id}=${render(m).length}`);\n ok(over.length === 0, `over the limit:\\n ${over.join(\"\\n \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T2 the opt-out is counted, not assumed away\", () => {\n ok(OPTOUT.length > 20);\n const worst = sms().map((m) => ({ id: m.id, len: render(m).length })).sort((a, b) => b.len - a.len)[0];\n ok(worst.len <= LIMIT, `${worst.id} at ${worst.len}`);\n return `tightest: ${worst.id} at ${worst.len}/${LIMIT}`;\n});\nt(\"T3 no text is so short it reads as a fragment\", () => {\n const tiny = sms().filter((m) => render(m).length < 80).map((m) => m.id);\n ok(tiny.length === 0, `suspiciously short: ${tiny.join(\", \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T4 every SMS names the sender, so it never lands as an unknown number\", () => {\n const anon = sms().filter((m) => !/Kim/.test(m.bodyTemplate)).map((m) => m.id);\n ok(anon.length === 0, `no sender named in: ${anon.join(\", \")}`);\n return scoped(sms().length, \"texts checked\");\n});\nt(\"T5 emails carry a subject and a body, texts carry neither an empty body nor a subject\", () => {\n const emails = allMessages(E).filter((m) => m.channel === \"email\");\n for (const m of emails) { ok(m.subject && m.subject.trim(), `${m.id} has no subject`); ok(m.bodyTemplate.trim().length > 100, `${m.id} body too short`); }\n for (const m of sms()) ok(!m.subject, `${m.id} is a text with a subject`);\n return `${emails.length} emails, ${sms().length} texts`;\n});\ndone();\n\n\n=====FILE tests/stories.test.mjs =====\n// KIM'S STORIES. Eight slots, all empty on purpose.\n// The standing rule: never invent a story, customer, testimonial, name or event. A slot with an\n// honest fallback beats a plausible lie. These tests exist so that rule survives a future edit.\nimport * as S from \"../build/stories.js\";\nimport * as E from \"../build/engine.js\";\nimport { suite, ok, eq, scoped, TRACKS, allMessages, msgText } from \"./_harness.mjs\";\nconst { t, done } = suite(\"stories\");\n\nt(\"S1 there are eight slots and every one is empty\", () => {\n eq(S.STORY_SLOTS.length, 8);\n for (const s of S.STORY_SLOTS) {\n eq(s.story, null, `${s.id} has been filled: a story must come from Kim, never from us`);\n ok(s.prompt && s.prompt.length > 25, `${s.id} has no 30-second prompt for her`);\n ok(s.lands && s.lands.length > 10, `${s.id} does not say where it lands`);\n ok(/^[a-z0-9_-]+$/i.test(s.id), `${s.id} is not a usable id`);\n }\n return scoped(S.STORY_SLOTS.length, \"slots, all empty\");\n});\nt(\"S2 an empty slot renders as nothing, never as a placeholder a customer could see\", () => {\n for (const s of S.STORY_SLOTS) {\n const out = S.storyFor(s.id);\n ok(out === \"\" || out == null, `${s.id} renders \"${out}\" when empty`);\n }\n return scoped(S.STORY_SLOTS.length, \"slots\");\n});\nt(\"S3 an unknown slot id yields nothing rather than throwing or inventing\", () => {\n for (const bad of [\"nope\", \"\", null, undefined, \"{{STORY:x}}\"]) {\n const out = S.storyFor(bad);\n ok(out === \"\" || out == null, `unknown id ${JSON.stringify(bad)} produced \"${out}\"`);\n }\n return scoped(5, \"unknown ids\");\n});\nt(\"S4 resolveStories strips every token and leaves no blank-line scar\", () => {\n const body = \"Before.\\n\\n{{STORY:slot_a}}\\n\\nAfter.\";\n const out = S.resolveStories(body);\n ok(!/\\{\\{STORY:/.test(out), \"a raw token survived into the message\");\n ok(!/\\n{3,}/.test(out), \"an empty slot left a gap of blank lines\");\n ok(out.includes(\"Before.\") && out.includes(\"After.\"), \"surrounding copy was damaged\");\n return scoped(3, \"assertions\");\n});\nt(\"S5 a nested or malformed token cannot leak through\", () => {\n for (const b of [\"{{STORY:{{STORY:x}}}}\", \"{{STORY:}}\", \"{{STORY: a b }}\", \"{{STORY:a}}{{STORY:b}}\"]) {\n ok(!/\\{\\{STORY:/.test(S.resolveStories(b)), `token survived: ${b}`);\n }\n return scoped(4, \"malformed tokens\");\n});\nt(\"S6 no message contains an unresolved story token after rendering\", () => {\n const all = allMessages(E);\n const bad = all.filter((m) => /\\{\\{STORY:/.test(S.resolveStories(msgText(m)))).map((m) => m.id);\n eq(bad, []);\n return scoped(all.length, \"messages\");\n});\nt(\"S7 every slot referenced by a message actually exists\", () => {\n const ids = new Set(S.STORY_SLOTS.map((s) => s.id));\n const used = new Set();\n for (const m of allMessages(E)) for (const mm of msgText(m).matchAll(/\\{\\{STORY:([^}]+)\\}\\}/g)) used.add(mm[1].trim());\n const orphans = [...used].filter((u) => !ids.has(u));\n eq(orphans, [], \"a message references a slot that does not exist\");\n return scoped(used.size, \"slots referenced\");\n});\nt(\"S8 no slot prompt asks Kim for something she cannot answer in 30 seconds\", () => {\n for (const s of S.STORY_SLOTS) {\n ok(s.prompt.length < 400, `${s.id} prompt is an essay, not a 30-second ask`);\n ok(/\\?/.test(s.prompt), `${s.id} prompt is not phrased as a question`);\n }\n return scoped(S.STORY_SLOTS.length, \"prompts\");\n});\ndone();\n\n\n=====FILE tests/taper-test.ts =====\n// Taper track test harness — run with: tsx tests/taper-test.ts\nimport {\n SLOW_WEEKLY,\n SLOW_FORTNIGHTLY,\n SLOW_MONTHLY_BANK,\n nextSlowTouch,\n monthlyTemplateFor,\n} from \"../engine/taper-messages.ts\";\nimport { REAL_BOOKING_URL } from \"../engine/puppy-messages.ts\";\nimport { STORY_SLOTS } from \"../engine/kim-stories.ts\";\n\nlet pass = 0,\n fail = 0;\nfunction t(name: string, ok: boolean, extra = \"\") {\n if (ok) pass++;\n else fail++;\n console.log((ok ? \"PASS\" : \"FAIL\") + \" — \" + name + (extra ? \" [\" + extra + \"]\" : \"\"));\n}\n\n// 1. Counts match Kim's spec exactly\nt(\"weekly count = 4\", SLOW_WEEKLY.length === 4);\nt(\"fortnightly count = 13\", SLOW_FORTNIGHTLY.length === 13);\nt(\"monthly bank = 12 (one per calendar month)\", SLOW_MONTHLY_BANK.length === 12);\n\n// 2. Offsets: weekly at rel days 7/14/21/28, fortnightly rel days 42..210 step 14\nconst wOff = SLOW_WEEKLY.map((m) => m.offsetHours);\nt(\"weekly offsets 168/336/504/672\", JSON.stringify(wOff) === JSON.stringify([168, 336, 504, 672]));\nconst fOff = SLOW_FORTNIGHTLY.map((m) => m.offsetHours);\nconst fExpect = Array.from({ length: 13 }, (_, i) => 1008 + 336 * i);\nt(\"fortnightly offsets rel day 42..210 step 14\", JSON.stringify(fOff) === JSON.stringify(fExpect));\nt(\n \"no overlap: last weekly (672) < first fortnightly (1008)\",\n wOff[3] < fOff[0]\n);\n\n// 3. Scheduler walk: 30 sends in a row, offsets strictly increasing, phases in order\nlet prev = -1;\nlet order: string[] = [];\nlet mono = true;\nfor (let i = 0; i < 30; i++) {\n const n = nextSlowTouch(i);\n if (n.offsetHours <= prev) mono = false;\n prev = n.offsetHours;\n order.push(n.phase);\n}\nt(\"offsets strictly increasing across 30 sends\", mono);\nt(\n \"phase order weekly x4 -> fortnightly x13 -> monthly x13+\",\n JSON.stringify(order.slice(0, 4)) === JSON.stringify(Array(4).fill(\"weekly\")) &&\n JSON.stringify(order.slice(4, 17)) === JSON.stringify(Array(13).fill(\"fortnightly\")) &&\n order.slice(17).every((p) => p === \"monthly\")\n);\nt(\"first monthly at rel hour 5760 (abs day 261)\", nextSlowTouch(17).offsetHours === 5760);\nt(\"second monthly 30d later (6480)\", nextSlowTouch(18).offsetHours === 6480);\nt(\"monthly template resolved by landing month\", nextSlowTouch(17).template === null);\n\n// 4. Monthly bank keyed to calendar months, seasonal copy in season\nt(\"July message covers heat + fireworks\", /heat|hot/i.test(SLOW_MONTHLY_BANK[6].bodyTemplate) && /firework/i.test(SLOW_MONTHLY_BANK[6].bodyTemplate));\nt(\"December message covers holidays\", /holiday|routine/i.test(SLOW_MONTHLY_BANK[11].bodyTemplate));\nt(\"monthlyTemplateFor picks by month\", monthlyTemplateFor(new Date(2027, 6, 15)).id === \"slow_m-jul\" && monthlyTemplateFor(new Date(2027, 11, 3)).id === \"slow_m-dec\");\n\n// 5. THE PROMISE: no ask attached to any taper message. No booking links anywhere.\nconst all = [...SLOW_WEEKLY, ...SLOW_FORTNIGHTLY, ...SLOW_MONTHLY_BANK];\nt(\n \"zero booking links in all 29 messages\",\n all.every((m) => !m.bodyTemplate.includes(REAL_BOOKING_URL) && !m.bodyTemplate.includes(\"widget/booking\") && !/book(ing)? (a|your|here)/i.test(m.bodyTemplate))\n);\nt(\n \"no sales asks (book now / sign up / enroll / offer / discount)\",\n all.every((m) => !/book now|sign up|enrol|% off|discount|special offer|limited/i.test(m.bodyTemplate))\n);\n\n// 6. Hygiene: ids unique, placeholders well-formed, channels valid, sms length sane\nconst ids = new Set(all.map((m) => m.id));\nt(\"all 29 ids unique\", ids.size === all.length);\nt(\"channels valid\", all.every((m) => m.channel === \"sms\" || m.channel === \"email\"));\nt(\n \"emails have subject+preview, sms have neither\",\n all.every((m) => (m.channel === \"email\" ? !!m.subject && !!m.previewText : !m.subject && !m.previewText))\n);\n// [was: this allowed only {{FIRST_NAME}} and {{DOG_NAME}}, so it went red on all eight legitimate\n// {{STORY:id}} slots the moment the story system landed. The test was stale, not the copy. It now\n// allows a story token ONLY when the slot actually exists, which is the stronger check: a typo in\n// a slot id would previously have been \"malformed\" and is now caught by name.]\nconst KNOWN_SLOTS = new Set(STORY_SLOTS.map((s) => s.id));\nconst badTokens: string[] = [];\nfor (const m of all) {\n for (const p of m.bodyTemplate.match(/\\{\\{[^}]*\\}\\}/g) || []) {\n if (p === \"{{FIRST_NAME}}\" || p === \"{{DOG_NAME}}\") continue;\n const story = p.match(/^\\{\\{STORY:([a-z_]+)\\}\\}$/);\n if (story && KNOWN_SLOTS.has(story[1])) continue;\n badTokens.push(`${m.id}:${p}`);\n }\n}\nt(\"no malformed placeholders, and every story token names a real slot\", badTokens.length === 0, badTokens.join(\" \"));\nconst smsLens = all.filter((m) => m.channel === \"sms\").map((m) => m.bodyTemplate.replace(\"{{FIRST_NAME}}\", \"Jennifer\").replace(/\\{\\{DOG_NAME\\}\\}/g, \"Biscuit\").length);\nt(\"all sms under 400 chars rendered\", smsLens.every((l) => l < 400), \"max=\" + Math.max(...smsLens));\nt(\"every message signed Kim\", all.every((m) => m.bodyTemplate.includes(\"Kim\")));\nt(\"no pbe- slug anywhere\", all.every((m) => !m.bodyTemplate.includes(\"pbe-\")));\n\n// 7. Reply mechanism.\n// [was: \"sms all carry a reply line\", checked against the TEMPLATE. It read red on 7 of 13 texts.\n// Wrong artifact: the opt-out line is appended at render time, never stored in the template, so\n// every text as actually sent ends \"Reply STOP to stop these texts.\" The check below measures the\n// sent message. The separate, real gap the old check was groping at is measured underneath it.]\nconst SMS_OPTOUT_SENT = \"Reply STOP to stop these texts.\";\nt(\n \"every text as actually sent ends with the opt-out line\",\n all.filter((m) => m.channel === \"sms\").every((m) => (m.bodyTemplate + \"\\n\\n\" + SMS_OPTOUT_SENT).trimEnd().endsWith(SMS_OPTOUT_SENT))\n);\n\n// THE REAL GAP, measured rather than asserted away. A customer on the slow track can go a long\n// stretch where the only thing any message tells them to do is leave. Ten of the twenty-nine\n// messages invite a reply; the longest run without one is FIVE (Jul, Aug, Sep, Oct, Nov), which in\n// the monthly phase is about five months.\n//\n// This is NOT fixed in the copy, deliberately. Kim signed the slow track off and was told in\n// writing that nothing in it changed; quietly editing seven messages would make that sentence\n// false. It is a question for her, and it is in the ledger. The number is LOCKED here so the gap\n// cannot get worse while it waits for an answer.\nconst invitesReply = (m: { bodyTemplate: string }) =>\n /\\breply\\b|\\blet me know\\b|\\btell me\\b|\\bask me\\b|\\btext me\\b/i.test(m.bodyTemplate);\nlet run = 0, worstRun = 0;\nfor (const m of all) { if (invitesReply(m)) run = 0; else if (++run > worstRun) worstRun = run; }\nt(\n \"the run of messages with no invitation to reply has not grown past its known value of 5\",\n worstRun <= 5,\n `longest run ${worstRun}, invited ${all.filter(invitesReply).length}/${all.length}`\n);\n\nconsole.log(`\\n=== RESULT: ${pass} passed, ${fail} failed ===`);\nprocess.exit(fail ? 1 : 0);\n\n\n=====FILE scripts/blueprint.py =====\nfrom reportlab.lib.pagesizes import A4\nfrom reportlab.lib.styles import getSampleStyleSheet, ParagraphStyle\nfrom reportlab.lib.units import mm\nfrom reportlab.lib import colors\nfrom reportlab.platypus import (SimpleDocTemplate, Paragraph, Spacer, Table, TableStyle,\n PageBreak, KeepTogether, HRFlowable)\n\nOUT = \"/mnt/user-data/outputs/CALL-BLUEPRINT-9-Aug.pdf\"\nss = getSampleStyleSheet()\nINK = colors.HexColor(\"#14171a\"); MUT = colors.HexColor(\"#5b6570\")\nACC = colors.HexColor(\"#1c5d99\"); RED = colors.HexColor(\"#b3261e\")\nGRN = colors.HexColor(\"#1a6b3c\"); BG = colors.HexColor(\"#f4f6f8\")\n\nH1 = ParagraphStyle(\"H1\", parent=ss[\"Normal\"], fontName=\"Helvetica-Bold\", fontSize=16, leading=19, textColor=INK, spaceAfter=1)\nSUB = ParagraphStyle(\"SUB\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=9, leading=12, textColor=MUT, spaceAfter=9)\nS = ParagraphStyle(\"S\", parent=ss[\"Normal\"], fontName=\"Helvetica-Bold\", fontSize=11.5, leading=14, textColor=ACC, spaceBefore=11, spaceAfter=4)\nB = ParagraphStyle(\"B\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=9.2, leading=12.3, textColor=INK, spaceAfter=3)\nLI = ParagraphStyle(\"LI\", parent=B, leftIndent=11, spaceAfter=2.5)\nQ = ParagraphStyle(\"Q\", parent=B, fontName=\"Helvetica-Bold\", textColor=INK, spaceBefore=5, spaceAfter=1)\nA = ParagraphStyle(\"A\", parent=B, leftIndent=11, textColor=colors.HexColor(\"#20303f\"), spaceAfter=1)\nNOTE= ParagraphStyle(\"NOTE\", parent=B, fontName=\"Helvetica-Oblique\", textColor=MUT, leftIndent=11, spaceAfter=4)\n\nst = []\ndef sec(t): st.append(Paragraph(t, S))\ndef p(t, s=B): st.append(Paragraph(t, s))\ndef bl(items, s=LI):\n for t in items: st.append(Paragraph(\"•\" + t, s))\ndef qa(q, a, note=None):\n blk=[Paragraph(q, Q), Paragraph(a, A)]\n if note: blk.append(Paragraph(note, NOTE))\n st.append(KeepTogether(blk))\nCELL = ParagraphStyle(\"CELL\", parent=ss[\"Normal\"], fontName=\"Helvetica\", fontSize=8.6, leading=11.4, textColor=INK)\nKEY = ParagraphStyle(\"KEY\", parent=CELL, fontName=\"Helvetica-Bold\")\ndef box(rows, widths, head=None):\n rows = [[Paragraph(c, KEY if i == 0 else CELL) for i, c in enumerate(r)] for r in rows]\n data = ([head] if head else []) + rows\n t = Table(data, colWidths=widths)\n style=[(\"FONT\",(0,0),(-1,-1),\"Helvetica\",8.6),(\"VALIGN\",(0,0),(-1,-1),\"TOP\"),\n (\"TEXTCOLOR\",(0,0),(-1,-1),INK),(\"BOTTOMPADDING\",(0,0),(-1,-1),4),(\"TOPPADDING\",(0,0),(-1,-1),4),\n (\"LINEBELOW\",(0,0),(-1,-2),0.4,colors.HexColor(\"#dfe4e9\")),\n (\"FONT\",(0,0),(0,-1),\"Helvetica-Bold\",8.6)]\n if head: style += [(\"FONT\",(0,0),(-1,0),\"Helvetica-Bold\",8),(\"TEXTCOLOR\",(0,0),(-1,0),MUT),\n (\"LINEBELOW\",(0,0),(-1,0),0.8,colors.HexColor(\"#b9c2cb\"))]\n t.setStyle(TableStyle(style)); st.append(t)\n\n# ============================ PAGE 1 ============================\np(\"The Dogs Spot: your blueprint for tonight\", H1)\np(\"Sunday 9 August, 20:00 to 21:00 Oxford time (3:00pm for Kim in Georgia). \"\n \"meet.google.com/kii-bcbi-ihm. Dial in (GB) +44 20 3873 3170 PIN 177 520 765 1562#.\", SUB)\n\nsec(\"The whole thing in five sentences\")\np(\"Kim Hicks owns a dog boarding and training business in Savannah, Georgia. She is paying two \"\n \"separate people. Kristian Moore has spent months building her a custom web application \"\n \"plus Chloe, the AI that answers her phone, and he is many months late. You were hired \"\n \"separately for the marketing side: ad tracking, reporting, and the automatic follow up messages. \"\n \"Tonight is Kristian's final exam, where Kim checks whether what he built actually works before \"\n \"she signs it off and takes ownership. You are in the room because you inherit Chloe and the \"\n \"GoHighLevel side the moment he signs off, so you need to see the condition of what is coming \"\n \"to you.\")\n\nsec(\"Why you specifically are on this call\")\np(\"Kim put it in writing to Kristian on 4 August: \\\"I've also engaged another developer, Amir, \"\n \"who is helping me with the ongoing GoHighLevel ecosystem, tracking, reporting, and future \"\n \"automation work. Since his work will need to integrate with the platform you've built, I'd like \"\n \"him to join the acceptance walkthrough.\\\"\")\np(\"And in her Chloe email on 7 August: \\\"Amir is included for visibility because he will be \"\n \"taking Chloe over once Kristian's handoff has been completed.\\\"\")\np(\"So your job tonight is to receive information, not to give it. You are the incoming owner \"\n \"doing a survey on a house before contracts exchange. Nobody expects you to perform.\")\n\nsec(\"The cast\")\nbox([\n [\"Kim Hicks\", \"The client. Pays you both. Sharp, thorough, writes long. Has spent this week \"\n \"documenting Kristian's failures in forensic detail. Not angry at you.\"],\n [\"Kristian Moore\", \"Moore Cre8ive. Built the app and Chloe. Under pressure. Wants sign off and \"\n \"the 30 day warranty clock started. Has asked, politely, that you touch nothing.\"],\n [\"Chloe\", \"Not a person. The AI voice agent that answers Kim's phones and books appointments. \"\n \"Built inside GoHighLevel. Becomes yours after handover.\"],\n [\"Candice\", \"Kim's new staff member, started around 2 August. The second Pup Talk calendar is for her.\"],\n], [26*mm, 148*mm])\n\nsec(\"What has actually happened since the start of August\")\nbox([\n [\"2 Aug\", \"You welcomed Candice. The Bootcamp deposit on the website was corrected from $250 to $500.\"],\n [\"4 Aug\", \"Kim tells Kristian she has hired you, and asks him five hard questions in advance so the \"\n \"walkthrough is not spent explaining. She refuses to accept the app until she has seen it \"\n \"running in her own accounts.\"],\n [\"6 Aug\", \"Kim sends you a very long message: six wording changes to the follow up messages, a \"\n \"request for tag cleanup, questions about deposits, and her answers to your question cards. \"\n \"She says the old puppy workflow has never been used and can be switched off any time.\"],\n [\"7 Aug\", \"The bad day. Four real customers call in and Chloe mishandles all four. Kim writes the \"\n \"whole thing up and sends it to Kristian, copying you, demanding seven fixes before tonight. \"\n \"Kristian replies with a long defence of what is built. They agree a freeze: you observe, \"\n \"you change nothing in the app, calendars, workflows or Chloe.\"],\n [\"7 Aug\", \"You send the Friday report at 11:46pm. One line in it is wrong.\"],\n [\"8 Aug\", \"You catch it yourself at 7:33am and correct it to her: you had read the wrong field, and \"\n \"her Facebook tracking was working all along.\"],\n [\"9 Aug\", \"Today. Facebook ad permission fixed and watched working. Corrected report rebuilt. Kim \"\n \"answers your question cards and says yes to the three that were holding up go live.\"],\n], [16*mm, 158*mm])\n\nst.append(PageBreak())\n\n# ============================ PAGE 2 ============================\np(\"What the hour will look like\", H1)\np(\"Kristian shares his screen. You share nothing. Roughly: Kristian speaks half, Kim forty percent, you ten.\", SUB)\n\nsec(\"The running order\")\nbox([\n [\"0 to 20 min\", \"Chloe retest. Kristian walks through the seven things Kim caught on Friday and \"\n \"shows they are fixed. Kim will be testing him hard. Say nothing here unless asked.\"],\n [\"20 to 40 min\", \"The app walkthrough. app.thedogsspotga.com, the 21 July build. He demonstrates \"\n \"features against the contract and the ChangeLog. This is the part you need to watch \"\n \"closely, because this is what you inherit.\"],\n [\"40 to 50 min\", \"The punch list. Anything still broken gets written down for correction and retest.\"],\n [\"50 to 60 min\", \"Handover talk. Documentation, operating guide, runbook, credentials, GitHub, \"\n \"Supabase, Railway. This is your slot. Ask your questions here.\"],\n], [22*mm, 152*mm])\n\nsec(\"The seven Chloe faults, so you understand what you are watching\")\np(\"All four calls were the same customer, George Fitzgerald, plus one first time boarder, Monique Burnett.\")\nbl([\n \"Chloe offered training program appointments to a man who just wanted his dog looked after for the day.\",\n \"Four separate times she told a caller \\\"we have assigned one of our team members to get back to you\\\" \"\n \"and no task, text or notification was ever created. Nobody was assigned. Nobody knew.\",\n \"Monique's boarding drop off was created correctly, then her pickup was created as a Pup Talk by \"\n \"mistake, and Chloe told her the stay was confirmed anyway.\",\n \"The staff review task that is supposed to fire for a first time boarder never fired.\",\n \"Chloe must not confirm a stay unless both the drop off and the pickup really exist.\",\n \"Chloe must not say a handoff happened unless it happened.\",\n \"The retry and rollback path described in his own document has to be shown working.\",\n])\np(\"Not his fault, and Kim has said so in writing: Chloe refusing a 9:30am change was a four hour minimum \"\n \"notice rule on the calendar. Kim changed it herself to fifteen minutes.\", NOTE)\n\nsec(\"What Kristian has already claimed in writing, so you can spot a change of story\")\nbl([\n \"The app is live, running the 21 July build, but still deployed in his accounts, not Kim's. \"\n \"Transfer happens after QA.\",\n \"GoHighLevel owns the booking link, the calendars, the appointments and the automations. His app is \"\n \"the customer facing portal on top of that.\",\n \"23 approved calendars, and he states none have been renamed, archived, duplicated or added.\",\n \"His app writes into GoHighLevel: contacts, appointments, opportunities, tags, notes, custom fields, \"\n \"appointment statuses and workflows. Underline that one. It is the same data your reporting reads.\",\n \"Chloe is configured directly in GoHighLevel and is separate from his app's code.\",\n])\n\nst.append(PageBreak())\n\n# ============================ PAGE 3 ============================\np(\"What they will ask you, and exactly what to say\", H1)\np(\"Every answer below is true today. You are not memorising a script, you are being handed the facts.\", SUB)\n\nsec(\"From Kristian\")\nqa(\"\\\"Have you made any changes to the account?\\\"\",\n \"\\\"No. Nothing in the application, the calendar mappings, the workflows or Chloe. My side has been \"\n \"reporting, ad tracking and the follow up messages, which sit separately.\\\"\",\n \"True. The freeze has been kept. Nothing you built touches his configuration.\")\nqa(\"\\\"What access do you have?\\\"\",\n \"\\\"Kim set me up with a private integration key so the reporting can read the account. It reads, it \"\n \"does not reconfigure anything.\\\"\")\nqa(\"\\\"What are you planning to change after handover?\\\"\",\n \"\\\"Nothing until your handover is documented and I have read it. After that I will come back to Kim \"\n \"with a plan rather than start changing things.\\\"\")\n\nsec(\"From Kim\")\nqa(\"\\\"Amir, does this affect your tracking?\\\"\",\n \"\\\"It might. What I need to know is what the app writes into the CRM and when, because my reporting \"\n \"reads the same records. That is one of my questions for tonight.\\\"\")\nqa(\"\\\"Amir, can you fix that?\\\"\",\n \"\\\"I can once it is mine. Tonight it is still Kristian's to correct, and I do not want to touch it \"\n \"while you are still testing his work, or neither of you will know what changed.\\\"\",\n \"This is the single most likely trap. Do not take on Chloe work tonight. It is not yours yet and \"\n \"fixing it would wreck the QA baseline she is trying to establish.\")\nqa(\"\\\"When will my things be done?\\\"\",\n \"\\\"Monday: the list that stopped loading, your domain lines, and the corrected numbers. Tuesday: the \"\n \"review workflows and the message overlap. The tag cleanup, the Free Training Day rebuild and your two \"\n \"calendars all sit inside the freeze, so they go the day after it lifts, and that is partly what tonight \"\n \"decides. The Pups Club unsubscribe I can do either way.\\\"\",\n \"Do not promise Wednesday for the tag cleanup or the Free Training Day rebuild. Both are workflow \"\n \"changes and both are frozen. Putting the delay on the freeze rather than on you is also just true.\")\nqa(\"\\\"What about the two calendars I asked for?\\\"\",\n \"\\\"That is a question for both of you. Creating calendars is exactly what the freeze covers, and \"\n \"Kristian has told you no calendars have been added since his reconciliation. Tell me the freeze does \"\n \"not apply to those two and they are built tomorrow.\\\"\",\n \"Getting this answered in front of both of them is one of your five goals. Half an hour of work is \"\n \"sitting behind a yes.\")\n\nsec(\"If you do not know, say one of these. Never bluff.\")\np(\"Not knowing is completely normal for the person who has not built it. Bluffing is the only thing that \"\n \"would actually damage you tonight.\")\nbl([\n \"\\\"I do not want to guess at that. Let me check it properly and come back to you today.\\\"\",\n \"\\\"That is Kristian's side until handover, so I would rather he answered it than me speculating.\\\"\",\n \"\\\"I have not looked at that yet, so I do not have an answer I would stand behind.\\\"\",\n \"\\\"Can you show me what you are seeing?\\\" — buys you a minute and usually answers the question for you.\",\n \"\\\"Let me write that down and come back to you on it.\\\" Then actually write it down.\",\n])\np(\"If a technical question goes over your head entirely: \\\"Say that back to me in terms of what the \"\n \"customer experiences, and I will tell you whether it touches my side.\\\" That is a senior move, not \"\n \"a dodge, and it works every time.\")\n\nst.append(PageBreak())\np(\"Her open list, and what the freeze blocks\", H1)\np(\"If she asks when things will be done, this is the page. Half of it is waiting on tonight.\", SUB)\nbox([\n [\"The list that stopped loading\", \"She screenshotted her contact list dying mid scroll on 6 Aug, and \"\n \"separately said her page shows times but no dates. Never reproduced. The oldest thing outstanding. \"\n \"Not frozen. Monday.\"],\n [\"The four domain lines\", \"Four DNS records for Wix so her follow up emails send from thedogsspotga.com \"\n \"instead of a shared address. They do not exist yet because no sending domain is set up in her CRM. \"\n \"Not frozen. Monday.\"],\n [\"Free Training Day pick up calendar\", \"Her words: 30 minute appointments, bookable from 3:30pm with the \"\n \"last start at 4:30 so everything finishes by 5pm, with the usual appointment workflows. Twenty minutes \"\n \"of work. FROZEN.\"],\n [\"Second Pup Talk calendar\", \"Her words: a copy of the existing one under a different name, so Candice can \"\n \"book a customer straight onto a trainer's Pup Talk and the team can tell at a glance whose call it is. \"\n \"Ten minutes of work. FROZEN.\"],\n [\"Tag cleanup\", \"Remove tags not in use and ones not attached to a real customer. She also asked to track \"\n \"when a tag is applied, which her CRM does not record, so that half needs building. FROZEN.\"],\n [\"Free Training Day workflow\", \"The one that chased four people who had already booked. She built it \"\n \"herself and is open to a rebuild, with her watching. FROZEN.\"],\n [\"Review workflows\", \"Open both and settle whether her customers are being asked for a review twice. \"\n \"Reading only, not frozen. Tuesday.\"],\n [\"Message overlap\", \"Five no sale and tips sequences plus two auto responders. Confirm nothing double \"\n \"fires. Reading only, not frozen. Tuesday.\"],\n [\"Pups Club unsubscribe\", \"Her words: a way for subscription members to unsubscribe themselves. \"\n \"Doable either way.\"],\n [\"The switch on\", \"Fifteen minutes with her watching. Tagging on, new messages on, old workflow off. \"\n \"Waiting only on her picking a moment.\"],\n], [40*mm, 134*mm])\n\nst.append(PageBreak())\n\n# ============================ PAGE 4 ============================\np(\"What you must come away with\", H1)\np(\"If you get these five, the call was a success regardless of how it goes for Kristian.\", SUB)\n\nsec(\"Your five\")\nbox([\n [\"1\", \"Say the boundary out loud. \\\"Reporting, ads, tracking and the follow up messages are mine \"\n \"and carry on. The app, the calendars, the workflows and Chloe I am not touching until your \"\n \"handover is documented.\\\" Say this early. It makes you the professional in the room.\"],\n [\"2\", \"What does the app write into the CRM, and when? He listed contacts, appointments, \"\n \"opportunities, tags, notes and custom fields. Get the timing, so his writes and mine do not \"\n \"overwrite each other.\"],\n [\"3\", \"Does the app set opportunity value or move pipeline stages? Kim asked you today whether \"\n \"reporting depends on things being marked Won. If his app touches values or stages, your answer \"\n \"to her changes. This one is worth more than it sounds.\"],\n [\"4\", \"What exactly do I receive at handover, and on what date? Documentation, operating guide, \"\n \"runbook, credential sheet, GitHub, Supabase, Railway. Ask for a date, not a stage.\"],\n [\"5\", \"Do the two calendars fall under the freeze? Ask both of them together, get one answer.\"],\n], [8*mm, 166*mm])\n\nsec(\"Do not do these\")\nbl([\n \"Do not offer to fix anything of Chloe's tonight. Not yours yet, and it destroys Kim's clean test.\",\n \"Do not pile on about his failures. Kim is doing that thoroughly and it is her job, not yours. \"\n \"You come out of this better by being the calm one. He may also be the person you have to work with \"\n \"for another month.\",\n \"Do not promise a date for anything you have not scoped. \\\"I will come back to you with a date \"\n \"tomorrow\\\" is a complete answer.\",\n \"Do not raise the access key issue on this call. That is between you and Kim, and not in front \"\n \"of an outgoing contractor.\",\n \"Do not discuss money, yours or his.\",\n])\n\nsec(\"Numbers in your pocket, if you are asked how your side is doing\")\nbox([\n [\"Ad spend\", \"$718.98 last week. Facebook $554.98, Google $164.00.\"],\n [\"Cost per lead\", \"$4.11 overall. Best campaign $4.63, worst $10.87.\"],\n [\"New inquiries\", \"175 last week, down 22 on the week before.\"],\n [\"Facebook tracking\", \"Fixed today. The permission was missing since the connection was first built. \"\n \"The page now reads spend live from Meta.\"],\n [\"Follow up system\", \"Built, tested, running in practice mode. Has never messaged a real customer. \"\n \"Fifteen minutes from live once Kim picks a moment.\"],\n [\"The honest gap\", \"Revenue and ROAS do not work yet, because payment amounts never land on the \"\n \"booking record. That is the next build.\"],\n], [30*mm, 144*mm])\n\nsec(\"Last thing\")\np(\"You have been doing this properly. This week you caught your own mistake before the client did and \"\n \"corrected it inside twelve hours, which is more than the other contractor on this call can say about \"\n \"a four month overrun. Turn up, listen, ask your five, and write things down. That is the entire job \"\n \"tonight.\")\n\nSimpleDocTemplate(OUT, pagesize=A4, leftMargin=18*mm, rightMargin=18*mm, topMargin=14*mm,\n bottomMargin=12*mm, title=\"The Dogs Spot, call blueprint, 9 August\").build(st)\nprint(\"wrote\", OUT)\n\n\n=====FILE scripts/build.mjs =====\n// THE BUILD. engine/*.ts -> build/*.js, so the .mjs suites can import the same code the val runs.\n//\n// This file exists because the mapping used to live in my head and in shell history. A container\n// reclaim took the shell history with it. Anything a rebuild depends on is written down here.\n//\n// WHY IT TRANSPILES RATHER THAN BUNDLES. val.town runs seventeen separate files that import each\n// other, so at runtime there is exactly ONE copy of each module. A bundle per entry point gives\n// each entry its own private copy of everything below it: fill in a story slot and the engine's\n// copy would change while the story module's copy would not, and a test comparing the two would\n// pass on a system that is actually broken. So: every engine file is transpiled one-to-one, the\n// \".ts\" in each import specifier is rewritten to \".js\", and the friendly names the tests import\n// (build/engine.js, build/taper.js, build/stories.js) are thin re-export aliases onto that graph.\n// [was: `esbuild engine/puppy_path_v1.1.ts --outfile=build/engine.js` typed by hand, per file,\n// with --bundle on some and not others. A clean rebuild from source produced a build/ that\n// could not even be imported. The committed build/ had drifted from the source it came from.]\n//\n// Usage:\n// node scripts/build.mjs # engine/ -> build/\n// node scripts/build.mjs --src A --out B # build a copy of the tree somewhere else\nimport { spawnSync } from \"node:child_process\";\nimport { mkdirSync, existsSync, readdirSync, readFileSync, writeFileSync, rmSync } from \"node:fs\";\nimport { join, dirname, resolve, basename } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\n\n// Friendly name the tests import -> the engine source file behind it.\nexport const ALIASES = {\n engine: \"puppy_path_v1.1\",\n taper: \"taper-messages\",\n stories: \"kim-stories\",\n messages: \"puppy-messages\",\n};\n// Aliases that also need the source's default export forwarded.\nconst ALIAS_HAS_DEFAULT = new Set([\"engine\"]);\n\nconst arg = (flag, fallback) => {\n const i = process.argv.indexOf(flag);\n return i > -1 && process.argv[i + 1] ? process.argv[i + 1] : fallback;\n};\n\nexport function build({ src = join(ROOT, \"engine\"), out = join(ROOT, \"build\"), quiet = false } = {}) {\n const failures = [];\n if (!existsSync(src)) return [`source folder ${src} does not exist`];\n\n const sources = readdirSync(src).filter((f) => f.endsWith(\".ts\"));\n if (!sources.length) return [`no .ts files in ${src}: a build that builds nothing is not a build`];\n\n mkdirSync(out, { recursive: true });\n // Clear stale artifacts so a deleted source cannot leave a ghost module behind that tests import.\n for (const f of readdirSync(out)) if (f.endsWith(\".js\")) rmSync(join(out, f), { force: true });\n\n // 1. Transpile one-to-one. No bundling: the module graph is the point.\n const r = spawnSync(\"npx\", [\n \"--yes\", \"esbuild\",\n ...sources.map((f) => join(src, f)),\n \"--format=esm\",\n `--outdir=${out}`,\n \"--log-level=warning\",\n ], { encoding: \"utf8\" });\n if (r.status !== 0) return [`esbuild: ${(r.stderr || r.stdout || \"\").trim().slice(0, 800)}`];\n\n // 2. Rewrite import specifiers: \"./foo.ts\" -> \"./foo.js\". esbuild leaves them alone when it is\n // not bundling, and node will not resolve a .ts specifier.\n let rewritten = 0;\n for (const f of readdirSync(out).filter((x) => x.endsWith(\".js\"))) {\n const p = join(out, f);\n const before = readFileSync(p, \"utf8\");\n const after = before.replace(/(from\\s*[\"'])(\\.\\.?\\/[^\"']+?)\\.ts([\"'])/g, \"$1$2.js$3\");\n if (after !== before) { writeFileSync(p, after); rewritten++; }\n }\n\n // 3. Friendly-name aliases. Re-exports, not copies, so there is still one module underneath.\n for (const [alias, source] of Object.entries(ALIASES)) {\n if (!existsSync(join(out, `${source}.js`))) { failures.push(`alias ${alias}: ${source}.js was not built`); continue; }\n const lines = [\n `// Generated by scripts/build.mjs. Re-export, not a copy: one module underneath.`,\n `export * from \"./${source}.js\";`,\n ];\n if (ALIAS_HAS_DEFAULT.has(alias)) lines.push(`export { default } from \"./${source}.js\";`);\n writeFileSync(join(out, `${alias}.js`), lines.join(\"\\n\") + \"\\n\");\n }\n\n if (!quiet) {\n console.log(`transpiled ${sources.length} engine files -> ${out}`);\n console.log(`rewrote .ts import specifiers in ${rewritten} files`);\n console.log(`aliases: ${Object.entries(ALIASES).map(([a, s]) => `${a}.js -> ${s}.js`).join(\", \")}`);\n }\n return failures;\n}\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n const failures = build({ src: arg(\"--src\", join(ROOT, \"engine\")), out: arg(\"--out\", join(ROOT, \"build\")) });\n if (failures.length) { console.log(\"\\nBUILD FAILED:\\n\" + failures.join(\"\\n\")); process.exit(1); }\n console.log(\"\\nbuild ok\");\n}\n\n\n=====FILE scripts/bundle.mjs =====\n// THE BUNDLE. Everything that is not already on the val, in one restorable text file.\n//\n// WHY. The working container was reclaimed mid-session on 4 August and took the test suite, the\n// build script and the PDF generator with it. The engine survived only because val.town happened\n// to hold a complete copy. Nothing else had a second home. This gives the rest of the project one.\n//\n// The bundle is plain text with file markers, not an archive, for three reasons: it can be read by\n// a human who has lost everything else, it survives being pasted through a chat window, and it can\n// live on the val as an inert `file` next to the code it tests.\n//\n// Restore, from nothing, needing only node:\n// node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(\"BUNDLE.txt\",\"utf8\");\n// for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n// const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n// fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}'\n//\n// Usage: node scripts/bundle.mjs [--out handover/SOURCE-BUNDLE.txt]\nimport { readFileSync, writeFileSync, readdirSync, statSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { join, dirname, resolve, relative } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\n\n// engine/ is deliberately absent: the val holds it, verified file by file by scripts/deploy.mjs.\n// Everything here is the part that has no other home.\nconst INCLUDE = [\n { dir: \"tests\", match: /\\.(mjs|ts|json)$/ }, // .json since 9 Aug: tests/fixtures/ is source, not pulled data\n { dir: \"scripts\", match: /\\.(mjs|py)$/ },\n // The watchdog is a SEPARATE val, so scripts/deploy.mjs --check does not cover it and a reclaim\n // leaves no local copy. Its own val is a real second home, but the bundle should hold everything\n // that is not in the main val, and until now it quietly did not.\n { dir: \"watchdog\", match: /\\.ts$/ },\n];\nconst EXTRA = [\n // THE RESUME FILE FIRST. It is the only thing that stops the next session starting from scratch,\n // and on 7 August it would have been the single most valuable file to have had in the bundle.\n // AWAITING-AMIR is the ONLY channel for anything needing his approval, and it used to live only\n // in /mnt/user-data/outputs, which does not survive a container reclaim. A pending draft to the\n // client is not a derived artifact; losing it loses the work. Bundled since 9 Aug.\n \"handover/AWAITING-AMIR.md\",\n // HANDOFF.md IS AT THE REPO ROOT AND NOWHERE ELSE. On 9 Aug it briefly existed twice, at the root\n // and in handover/, and the bundle carried the handover/ one. A cold read caught it: the backup\n // held a THREE COMMIT OLD handoff whose §13 told the next session to fetch 13 of the 14 parts.\n // A backup of a stale copy of the recovery instructions is the worst possible failure here.\n // The guard below refuses to write a bundle while a second copy exists.\n \"HANDOFF.md\",\n // QUEUE.md is what §1 tells a new session to open after HANDOFF. It was not in the bundle, so a\n // reclaim destroyed the one file the handoff points at. MINED-*.md are the only receipts behind\n // the commercials in §3, including the Upwork contract number. money-page.html is the SOURCE of\n // Monday's client deliverable, and \"put the generator in the repo\" is useless when the repo is\n // not the durable thing. All four bundled since 9 Aug.\n \"QUEUE.md\",\n \"MINED-OLD-TREES.md\",\n \"MINED-HANDOVER.md\",\n \"reports/money-page.html\",\n \"reports/square-revenue-explainer.html\",\n \"BOARD-10-AUG.md\",\n \"AMIR-DO-THIS.md\",\n \"handover/KIM-MESSAGE-10-AUG-FINAL.txt\",\n \"BUILD-PLAN-10-AGENTS.md\",\n \"handover/RESUME.md\",\n \"handover/REGISTER-AUG7.md\",\n \"handover/SWEEP-7-AUG.md\",\n \"handover/AUTOPILOT.md\",\n \"handover/DRAFTS-WHILE-AWAY.md\",\n \"handover/MESSAGE-TO-KIM-7-AUG.txt\",\n \"reports/Friday-Report-7-Aug-2026.html\",\n \"handover/PLAN-TO-FINISH.md\",\n \"handover/SEND-TO-KIM.txt\",\n \"handover/REPLY-AUG5.txt\",\n \"handover/REGISTER-AUG5.md\",\n \"handover/AMIR_TODO.md\",\n \"handover/NURTURE-REVIEW-FOR-KIM.md\",\n \"handover/DEPOSIT-SPEC.md\",\n];\n// NOT INCLUDED, on purpose: the PDFs and the spreadsheet. They are DERIVED, and backing up a\n// derived artifact backs up the wrong thing. What has to survive is the recipe, and after the\n// 5 August reclaim it turned out the recipe did not — scripts/make_pdf.py reads an input shape it\n// never documented. scripts/make-pdfs.mjs is that missing step, and it is in the bundle.\n\nconst arg = (f, d) => { const i = process.argv.indexOf(f); return i > -1 && process.argv[i + 1] ? process.argv[i + 1] : d; };\nconst sha = (s) => createHash(\"sha256\").update(s).digest(\"hex\");\n\n// RECURSIVE since 9 Aug 2026. This used to read one level only, so tests/fixtures/ was skipped in\n// silence: the fixture the money suite reads was never in the bundle, and a tree restored after the\n// container loss that evening came back RED for a file the bundle had quietly declined to carry.\n// A backup that drops a directory without saying so is worse than one that fails loudly.\nconst files = [];\nconst walk = (abs, match, out) => {\n for (const f of readdirSync(abs).sort()) {\n const p = join(abs, f);\n if (statSync(p).isDirectory()) walk(p, match, out);\n else if (match.test(f)) out.push(relative(ROOT, p));\n }\n};\nfor (const { dir, match } of INCLUDE) walk(join(ROOT, dir), match, files);\nfor (const f of EXTRA) { try { statSync(join(ROOT, f)); files.push(f); } catch { /* not fatal */ } }\n\nif (!files.length) { console.log(\"BUNDLE FAILED: nothing to bundle. A bundle of nothing is worse than none.\"); process.exit(1); }\n\n// ONE HANDOFF, AT THE ROOT. See the note in EXTRA. Two copies means the bundle silently backs up\n// whichever one this list happens to name, and the other is the one being read and edited.\ntry {\n statSync(join(ROOT, \"handover/HANDOFF.md\"));\n console.log(\"BUNDLE FAILED: handover/HANDOFF.md exists. There must be exactly ONE handoff, at the repo root.\");\n console.log(\"On 9 Aug the duplicate meant the backup held a stale handoff that told the next session to fetch 13 of 14 parts.\");\n process.exit(1);\n} catch (e) { if (e?.code !== \"ENOENT\") throw e; }\n// And the thing that must never silently drop out again.\nif (!files.includes(\"HANDOFF.md\")) { console.log(\"BUNDLE FAILED: HANDOFF.md is not in the bundle.\"); process.exit(1); }\n\nconst MAX_PART = 78_000;\n// A SINGLE FILE CAN NOW EXCEED A WHOLE PART. negative-controls.mjs passed 80,000 characters on\n// 6 August — the val's own per-file ceiling — and the packer, which only ever splits BETWEEN\n// files, produced a part the val refused. A backup that cannot be written is not a backup, and\n// this is the file the whole disaster-recovery story rests on. Oversized files are cut into\n// numbered CHUNK records and rejoined on restore, in order.\nconst CHUNK = 60_000;\n\n// A file bigger than CHUNK becomes several records named \"#1\", \"#2\", ... which the\n// restore rejoins in order. Everything else is unchanged, so old parts and new parts read the same.\nconst records = [];\nconst manifest = [];\nfor (const f of files) {\n const content = readFileSync(join(ROOT, f), \"utf8\");\n manifest.push(` ${f.padEnd(38)} ${String(content.length).padStart(7)} bytes ${sha(content).slice(0, 12)}`);\n if (content.length <= CHUNK) { records.push({ name: f, body: content }); continue; }\n const n = Math.ceil(content.length / CHUNK);\n for (let i = 0; i < n; i++) records.push({ name: `${f}#${i + 1}`, body: content.slice(i * CHUNK, (i + 1) * CHUNK) });\n console.log(` (${f} is ${content.length.toLocaleString()} chars, split across ${n} records)`);\n}\nconst parts = records.map((r) => `\\n=====FILE ${r.name} =====\\n${r.body}`);\nconst recNames = records.map((r) => r.name);\n\n// val.town caps EVERY file at 80,000 characters, not just main.ts. So the bundle ships in parts,\n// split at FILE boundaries: each part is a complete, independently restorable bundle of whole\n// files. Nothing has to be concatenated in the right order, and losing one part costs you the\n// files in that part rather than the whole archive.\n\n\nconst header = (partNo, partCount, partFiles) => [\n \"THE DOGS SPOT — SOURCE BUNDLE\" + (partCount > 1 ? ` (part ${partNo} of ${partCount})` : \"\"),\n \"\",\n \"Everything in this project that does not already live on val.town. The engine is NOT here:\",\n \"the engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\",\n \"do not assume) are verified file by file by\",\n \"scripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\",\n \"\",\n \"RESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\",\n \"\",\n ` node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");`,\n ` for(const s of b.split(\"\\\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\\\n\");`,\n ` const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});`,\n ` fs.writeFileSync(f,c.replace(/\\\\n$/,\"\"))}' PART.txt`,\n \"\",\n \"A record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\",\n \"strip one trailing newline from the last. scripts/restore.mjs does this for you.\",\n \"\",\n \"Each part is complete in itself: whole files only, no reassembly, any order.\",\n \"\",\n \"Then: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\",\n \" node scripts/build.mjs (needs engine/ back from the val first)\",\n \" node tests/run-all.mjs\",\n \" node tests/negative-controls.mjs (proves the suite above can actually fail)\",\n \"\",\n `IN THIS PART (${partFiles.length} of ${files.length} files)`,\n ...partFiles.map((f) => manifest[files.indexOf(f)]),\n \"\",\n \"=\".repeat(96),\n].join(\"\\n\");\n\n// Pack files into parts, largest-first, each part under the cap.\nconst sizeOf = (i) => parts[i].length;\nconst packs = [];\nlet cur = [];\nlet curLen = 2000; // rough header allowance\nrecNames.forEach((f, i) => {\n if (cur.length && curLen + sizeOf(i) > MAX_PART) { packs.push(cur); cur = []; curLen = 2000; }\n cur.push(i); curLen += sizeOf(i);\n});\nif (cur.length) packs.push(cur);\n\nconst outBase = arg(\"--out\", join(ROOT, \"handover/SOURCE-BUNDLE\")).replace(/\\.txt$/, \"\");\nconst written = [];\npacks.forEach((idxs, n) => {\n const partFiles = idxs.map((i) => recNames[i]);\n const body = header(n + 1, packs.length, partFiles) + idxs.map((i) => parts[i]).join(\"\\n\") + \"\\n\";\n const out = packs.length === 1 ? `${outBase}.txt` : `${outBase}.part${n + 1}.txt`;\n writeFileSync(out, body);\n written.push({ out, body, partFiles });\n console.log(`${out} ${body.length.toLocaleString()} chars ${partFiles.length} files`);\n});\n\n// Prove the bundle round-trips before claiming it is a backup. A backup that has never been\n// restored is a hope, not a backup.\nconst roundTrip = new Map();\nfor (const { body } of written) {\n for (const s of body.split(\"\\n=====FILE \").slice(1)) {\n const i = s.indexOf(\" =====\\n\");\n const name = s.slice(0, i);\n const chunk = s.slice(i + 7);\n const m = /^(.*)#(\\d+)$/.exec(name);\n // ONE trailing newline comes from the join between records, whatever the chunk itself ends\n // with, so stripping exactly one recovers the chunk byte-for-byte.\n if (m) roundTrip.set(m[1], (roundTrip.get(m[1]) ?? \"\") + chunk.replace(/\\n$/, \"\"));\n else roundTrip.set(name, chunk.replace(/\\n$/, \"\"));\n }\n}\nconst broken = [];\nfor (const f of files) {\n const original = readFileSync(join(ROOT, f), \"utf8\");\n const restored = roundTrip.get(f);\n if (restored == null) broken.push(`${f}: missing from every part`);\n else if (sha(restored) !== sha(original)) broken.push(`${f}: does not round-trip (${sha(original).slice(0, 8)} -> ${sha(restored).slice(0, 8)})`);\n}\nconst over = written.filter((w) => w.body.length > 80_000).map((w) => w.out);\nif (over.length) { console.log(`\\nOVER THE 80,000 CHARACTER VAL LIMIT: ${over.join(\", \")}`); process.exit(1); }\nif (broken.length) { console.log(\"\\nROUND-TRIP FAILED, this is not a backup:\\n\" + broken.join(\"\\n\")); process.exit(1); }\nconsole.log(`round-trip verified: all ${files.length} files restore byte-for-byte across ${packs.length} part(s)`);\n\n",[368],"ed9b97d7-005d-4723-80e4-dbb4be8d260c","SOURCE-BUNDLE.part8.txt","7c8dcd00-91bc-11f1-8e89-1607ee4eb77e",685,["D",1786387548911],28,"THE DOGS SPOT — SOURCE BUNDLE (part 8 of 17)\n\nEverything in this project that does not already live on val.town. The engine is NOT here:\nthe engine files on val 1bfa6e81-74e1-4c6c-ab32-118304a4ffff (23 of them on 9 Aug 2026; list the val,\ndo not assume) are verified file by file by\nscripts/deploy.mjs --check. Restore that with the val, restore this with the snippet below.\n\nRESTORE (needs only node, from an empty folder). Save each part, then run this ON EACH ONE:\n\n node -e 'const fs=require(\"fs\"),p=require(\"path\");const b=fs.readFileSync(process.argv[1],\"utf8\");\n for(const s of b.split(\"\\n=====FILE \").slice(1)){const i=s.indexOf(\" =====\\n\");\n const f=s.slice(0,i),c=s.slice(i+7);fs.mkdirSync(p.dirname(f),{recursive:true});\n fs.writeFileSync(f,c.replace(/\\n$/,\"\"))}' PART.txt\n\nA record named #1, #2, ... is one FILE cut into pieces: concatenate them in order, then\nstrip one trailing newline from the last. scripts/restore.mjs does this for you.\n\nEach part is complete in itself: whole files only, no reassembly, any order.\n\nThen: node scripts/deploy.mjs --check (pulls nothing, proves the val matches)\n node scripts/build.mjs (needs engine/ back from the val first)\n node tests/run-all.mjs\n node tests/negative-controls.mjs (proves the suite above can actually fail)\n\nIN THIS PART (4 of 61 files)\n\n tests/registry.test.mjs 4947 bytes 9cfa5044cbd0\n tests/render.test.mjs 2941 bytes ea24d897a12f\n tests/report-logic.test.mjs 8329 bytes 505cbbf5e568\n\n================================================================================================\n=====FILE tests/negative-controls.mjs#2 =====\n cash or taken over the phone does not reach the card system, so it will not show here.\";',\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H60 Kim is told where else to look\",\n },\n {\n name: \"the card stops saying the deposit is per dog\",\n file: \"engine/dashboard.ts\",\n find: \"$50 per dog, so a three-dog stay is $150.\",\n replace: \"Counted as one $50 deposit per stay.\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.12 the card says the deposit is per dog\",\n },\n {\n name: \"the headline names a flat $50 above rows that owe $50 a dog\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a $50.00 card payment for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H61 the headline never names an amount\",\n },\n {\n name: \"looking at the deposit list resets the refresh clock\",\n file: \"engine/deposits.ts\",\n // If a check writes the attempt stamp, the check becomes the reason the refresh never fires.\n find: \" const attempt: any = await b.getJSON(ATTEMPT_KEY).catch(() => null);\",\n replace: \" const attempt: any = await b.getJSON(ATTEMPT_KEY).catch(() => null);\\n await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString() }).catch(() => {});\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D33 reading the list reports when\",\n },\n {\n name: \"the read route stops reporting when the refresh last tried\",\n file: \"engine/deposits.ts\",\n find: \" lastAttemptAt: attempt?.at ?? null,\",\n replace: \" lastAttemptedAt: attempt?.at ?? null,\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D33 reading the list reports when\",\n },\n {\n name: \"the allocator debits one $50 while the rule clears on a lump sum\",\n file: \"engine/holiday-deposits.ts\",\n // The money bug's fourth door: a two-dog stay settled by $100 debited nothing at all, and the\n // same $100 settled the customer's next stay. 29% of generated multi-stay customers hit it.\n find: \" for (const p of qualifyingPayments(s, available)) spent.add(p.id);\",\n replace: \" const c = collapseSameMoney(paymentsNearStay(s, available)).kept.find((p) => p.amount === DEPOSIT);\\n if (c) spent.add(c.id);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H62 one payment cannot settle two multi-dog\",\n },\n {\n name: \"what settles a stay and what gets debited go back to being two different rules\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const exact = qualifyingPayments(stay, payments);\",\n replace: \" const exact = near.filter((p) => p.amount === DEPOSIT).slice(0, dogs);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H58 the deposit is $50 PER DOG\",\n },\n {\n name: \"the dogs charged for are counted from the names again\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return Math.max(1, stay.dogCount || stay.dogs.length || 1);\",\n replace: \" return Math.max(1, stay.dogs.length || 1);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H64 the amount charged and the dogs named\",\n },\n {\n name: \"three payment dates are chained together with ands\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return `${items.slice(0, -1).join(\\\", \\\")} and ${items[items.length - 1]}`;\",\n replace: \" return items.join(\\\" and \\\");\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H65 three dates read as a list\",\n },\n {\n name: \"the headline has Kim owing money to her customers\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a card payment matching what ${n === 1 ? \\\"it is\\\" : \\\"they are\\\"} owed.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H66 the headline says what is owed\",\n },\n {\n name: \"a $250 payment is read as five holiday deposits with no mention of training\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (due === TRAINING_DEPOSIT) return ` Worth an eye: $${TRAINING_DEPOSIT} is also what a training deposit costs, so this one payment could be either.`;\",\n replace: \" if (false) return \\\"\\\";\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H67 a $250 deposit is flagged\",\n },\n {\n name: \"the card shows two dog names beside a three-dog charge\",\n file: \"engine/dashboard.ts\",\n find: \" if (names.length < n) return `${names.join(\\\", \\\")} and ${n - names.length} more (${n} in total)`;\",\n replace: \" if (false) return \\\"\\\";\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.17 the Dogs column never contradicts\",\n },\n {\n name: \"the refresh stops recording which schedule started it\",\n file: \"engine/deposits.ts\",\n find: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\",\n replace: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString() }).catch(() => {});\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D34 the refresh records WHICH schedule\",\n },\n {\n name: \"the second scheduled file collects on every tick again\",\n file: \"engine/deposits-cron.ts\",\n // [was: deleting the `if (!g.ran) return`, which stopped being the gate when the gate moved\n // INSIDE refreshIfDue. The fault that matters now is bypassing the shared step entirely.]\n find: \" const g = await refreshIfDue(() => blob.getJSON(ATTEMPT_KEY) as any, () => runCollection(false, \\\"deposits-cron\\\"), Date.now());\",\n replace: \" const g = { ran: true, why: \\\"collected\\\" }; await runCollection(false, \\\"deposits-cron\\\");\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the settle rule stops collapsing duplicates, so a backfilled twin can settle a stay\",\n file: \"engine/holiday-deposits.ts\",\n // The OTHER copy of that line, inside qualifyingPayments. Both need guarding: one decides what\n // Kim reads, the other decides what gets spent.\n find: \" const near = [...collapseSameMoney(paymentsNearStay(stay, payments)).kept]\",\n replace: \" const near = [...paymentsNearStay(stay, payments)]\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H68 one $50 written twice\",\n },\n {\n name: \"a row denies a payment that is sitting in its own window\",\n file: \"engine/holiday-deposits.ts\",\n // 7.9% of generated rows said \"no card payment is on file around it at all\" with the payment\n // right there. Kim phones; the customer says \"I paid on the 20th\"; they did.\n find: \" const near = collapseSameMoney(paymentsNearStay(stay, opts.all ?? payments)).kept;\",\n replace: \" const near = collapseSameMoney(paymentsNearStay(stay, payments)).kept;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H69 a row never denies a payment\",\n },\n {\n name: \"money already counted against an earlier stay stops being explained\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const countedNote = counted.length\",\n replace: \" const countedNote = false && counted.length\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H69 a row never denies a payment\",\n },\n {\n name: \"three dogs paid for in one visit print the same date three times\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const uniq = [...new Set(days)];\",\n replace: \" const uniq = days;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H70 three dogs paid for in one visit\",\n },\n {\n name: \"only the $250 collision is flagged, not the likelier ones\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (due > DEPOSIT) return ` Worth an eye: one payment of this size could also be the boarding total\",\n replace: \" if (false) return ` Worth an eye: one payment of this size could also be the boarding total\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H71 a lump sum for several dogs\",\n },\n {\n name: \"the amount shown against a settled multi-dog stay is one dog's worth\",\n file: \"engine/holiday-deposits.ts\",\n find: \" return { stay, state: \\\"seen\\\", amountSeen: due,\",\n replace: \" return { stay, state: \\\"seen\\\", amountSeen: DEPOSIT,\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H72 the amount shown against a settled stay\",\n },\n {\n name: \"a row is labelled 'Not paid' on Kim's card\",\n file: \"engine/dashboard.ts\",\n // The most natural phrasing of the one thing this feature must never say, and the old ban\n // regex let it straight through.\n find: ' none_seen: { label: \"Worth a look\", color: WARN },',\n replace: ' none_seen: { label: \"Not paid\", color: CRIT },',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the sentence saying this is not a list of people who owe her money is dropped\",\n file: \"engine/holiday-deposits.ts\",\n find: \"This is a shortlist to look at rather than a list of people who owe you.`);\",\n replace: \"This is a shortlist.`);\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the card writes '1 dogs, names not recorded'\",\n file: \"engine/dashboard.ts\",\n find: ' if (!names.length) return `${n} ${n === 1 ? \"dog\" : \"dogs\"}, names not recorded`;',\n replace: ' if (!names.length) return `${n} dogs, names not recorded`;',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.18 the counts on the card\",\n },\n {\n name: \"a backfill record from months away is folded into a payment as the same money\",\n file: \"engine/holiday-deposits.ts\",\n // The money bug's fifth door: $50 is exactly the amount a repeat customer pays twice in a\n // year, so a November payment and a December till record were read as one, deleting a real\n // deposit and then telling Kim nothing was on file.\n find: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount && withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS))) {\",\n replace: \" if (p.kind === \\\"matched\\\" && directs.some((d) => d.amount === p.amount)) {\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H74 a payment months away\",\n },\n {\n name: \"the date bound tightens past the one real pair on her account\",\n file: \"engine/holiday-deposits.ts\",\n find: \"export const COLLAPSE_WINDOW_DAYS = 21;\",\n replace: \"export const COLLAPSE_WINDOW_DAYS = 7;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H74 a payment months away\",\n },\n {\n name: \"the same payment is printed twice on one row, in contradictory terms\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const others = rest.filter((p) => !opts.alreadyCounted?.has(p.id));\",\n replace: \" const others = rest;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H75 money already counted appears once\",\n },\n {\n name: \"three taps on one day are printed as three identical lines\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const prev = byAmountAndDay.get(k);\",\n replace: \" const prev = undefined; byAmountAndDay.set(`${k}|${p.id}`, { amount: p.amount, day, n: 1 });\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H76 three taps on one day\",\n },\n {\n name: \"a row on Kim's card is relabelled 'No payment received'\",\n file: \"engine/dashboard.ts\",\n // One of four phrasings a ninth review walked straight past the word ban.\n find: ' none_seen: { label: \"Worth a look\", color: WARN },',\n replace: ' none_seen: { label: \"No payment received\", color: CRIT },',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the card prints a running total of what customers supposedly owe\",\n file: \"engine/dashboard.ts\",\n find: '

${windowLine(dep.windows)}',\n replace: '

These stays are short by $150.00 between them. ${windowLine(dep.windows)}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the engine's hourly refresh is wrapped in a condition that never fires\",\n file: \"engine/puppy_path_v1.1.ts\",\n find: \" await dep.refreshIfDue(\",\n replace: \" if (Math.random() < 0) await dep.refreshIfDue(\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the scheduled file collects a second time, outside the gate\",\n file: \"engine/deposits-cron.ts\",\n find: \" if (!g.ran) { console.log(`[deposits] ${g.why}`); return; }\",\n replace: \" await runCollection(false, \\\"deposits-cron\\\");\\n if (!g.ran) { console.log(`[deposits] ${g.why}`); return; }\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the row label is rendered from a ternary instead of the allowed set\",\n file: \"engine/dashboard.ts\",\n // The allow-list pinned the constant and not the page: the render site was free.\n find: \"${esc(shown(r).label)}\",\n replace: '${esc(r.state === \"seen\" ? \"Payment on file\" : \"Worth a look\")}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the card grows a column of money nobody vouches for\",\n file: \"engine/dashboard.ts\",\n find: \"WhoStayDogsDeposit\",\n replace: \"WhoStayDogsDepositTo chase\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"the engine's refresh is wrapped in a condition placed before the import\",\n file: \"engine/puppy_path_v1.1.ts\",\n // The exact bypass a tenth review used against the previous, statement-level pin.\n find: \" try {\\n const dep = await import(\\\"./deposits.ts\\\");\",\n replace: \" try {\\n if (Date.now() < 0) {\\n const dep = await import(\\\"./deposits.ts\\\");\",\n then: {\n find: \" } catch (e) { console.log(\\\"deposits refresh skipped\\\", String(e).slice(0, 120)); }\",\n replace: \" } } catch (e) { console.log(\\\"deposits refresh skipped\\\", String(e).slice(0, 120)); }\",\n },\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D30 the engine calls that rule\",\n },\n {\n name: \"the scheduled file aliases the collector and calls it outside the gate\",\n file: \"engine/deposits-cron.ts\",\n find: \" const g = await refreshIfDue(\",\n replace: \" const always = runCollection; await always(false, \\\"deposits-cron\\\");\\n const g = await refreshIfDue(\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the scheduled file's gate is handed a reader that is always empty\",\n file: \"engine/deposits-cron.ts\",\n find: \"() => blob.getJSON(ATTEMPT_KEY) as any\",\n replace: \"async () => null\",\n once: true,\n suite: \"deposits-collect.test.mjs\",\n mustFail: \"D35 the second scheduled file uses\",\n },\n {\n name: \"the plural headline goes back to 'what are owed on them'\",\n file: \"engine/holiday-deposits.ts\",\n find: \"we cannot find a card payment matching the deposit for ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n replace: \"we cannot find a card payment matching what are owed on ${n === 1 ? \\\"it\\\" : \\\"them\\\"}.`);\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H77 the plural headline is a sentence\",\n },\n {\n name: \"only one spelling of cancelled keeps a booking off the list\",\n file: \"engine/holiday-deposits.ts\",\n find: 'export const DEAD_STATUSES = [\"cancelled\", \"canceled\", \"noshow\", \"no-show\", \"no show\", \"invalid\"];',\n replace: 'export const DEAD_STATUSES = [\"cancelled\"];',\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H78 every way her CRM says a booking is dead\",\n },\n {\n name: \"the collapse bound is hardcoded next to the constant that documents it\",\n file: \"engine/holiday-deposits.ts\",\n find: \"withinDays(d.at, p.at, COLLAPSE_WINDOW_DAYS)\",\n replace: \"withinDays(d.at, p.at, 30)\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H79 the collapse bound is the constant\",\n },\n {\n name: \"two payments of the same size on the same day render identically\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const ofN = twinDay > 1 ? ` (one of ${twinDay} payments of that amount that day)` : \\\"\\\";\",\n replace: \" const ofN = \\\"\\\";\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H80 two payments of the same size\",\n },\n {\n name: \"a generated note tells Kim the customer still owes\",\n file: \"engine/holiday-deposits.ts\",\n // The accusation scan used to read hand-typed fixture notes, so this reached her page green.\n find: \"already been counted against ${counted.length === 1 ? \\\"an earlier stay\\\" : \\\"earlier stays\\\"} of theirs.`\",\n replace: \"already been counted against ${counted.length === 1 ? \\\"an earlier stay\\\" : \\\"earlier stays\\\"} of theirs, so they still owe this one.`\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the display list is the collapsed one, so a folded payment vanishes off the row\",\n file: \"engine/holiday-deposits.ts\",\n // A customer who paid BOTH deposits, fourteen days apart, had her Thanksgiving row read\n // \"no card payment is on file around it at all\" — because the till record had been folded\n // against the December card payment and the row was shown the collapsed list.\n find: \" const st = statusFor(s, available, { all: payments, alreadyCounted: new Set(spent) });\",\n replace: \" const st = statusFor(s, available, { all: money, alreadyCounted: new Set(spent) });\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H82 a folded payment still shows on the row\",\n },\n {\n name: \"the card writes prose of its own into a row's note\",\n file: \"engine/dashboard.ts\",\n find: '${esc(r.note)}',\n replace: '${esc(r.note)} Those customers are still to pay.',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the longest stay accepted drifts away from the constant that documents it\",\n file: \"engine/holiday-deposits.ts\",\n find: \"d <= shiftDays(s.day, MAX_STAY_DAYS)\",\n replace: \"d <= shiftDays(s.day, 60)\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H81 the longest stay accepted\",\n },\n {\n name: \"the same-day clause stops naming the day\",\n file: \"engine/holiday-deposits.ts\",\n find: \"` (one of ${twinDay} payments of that amount that day)`\",\n replace: \"` (one of ${twinDay} payments of that amount)`\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H80 two payments of the same size\",\n },\n {\n name: \"a row denies a match one clause before printing it\",\n file: \"engine/holiday-deposits.ts\",\n // The v2 bug's exact sentence, back in a different branch. 1.3% of rows.\n find: \" const why = blocked.length\",\n replace: \" const why = false && blocked.length\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H83 a row never denies a match\",\n },\n {\n name: \"the lump-sum advice names a number of payments the rule would refuse\",\n file: \"engine/holiday-deposits.ts\",\n find: \"${due / DEPOSIT} separate $${DEPOSIT} payments would be clearer.`;\",\n replace: \"Two or three separate $${DEPOSIT} payments would be clearer.`;\",\n once: true,\n suite: \"holiday-deposits.test.mjs\",\n mustFail: \"H84 the advice on a lump sum\",\n },\n {\n name: \"an accusation is added to the note cell, gated on a row state\",\n file: \"engine/dashboard.ts\",\n // The old allow-list only ever rendered `seen` rows, so any conditional was dead in its fixture.\n find: '${esc(r.note)}',\n replace: '${esc(r.note)}${r.state === \"none_seen\" ? \" They have skipped the deposit.\" : \"\"}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"an accusation is added to the Who column\",\n file: \"engine/dashboard.ts\",\n find: \"`${escCell(who(r))}\",\n replace: \"`${escCell(who(r))} (owes)\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"an accusation is added to the Dogs column\",\n file: \"engine/dashboard.ts\",\n find: \"${escCell(dogsCell(r))}\",\n replace: \"${escCell(dogsCell(r))} (unpaid)\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the staleness warning is turned into an accusation\",\n file: \"engine/dashboard.ts\",\n find: \"will still show here as not found, so check the date before you act on a name.\",\n replace: \"will still show here as having skipped it, so check the date before you act on a name.\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the card synthesises a debt total that coincides with a row's own figure\",\n file: \"engine/dashboard.ts\",\n // The realistic wording, computed the way the card would really compute it — which is exactly\n // the form the old substring check could not see.\n find: '

${windowLine(dep.windows)}',\n replace: '

These stays are still short by $${rows.filter((r) => r.state === \"none_seen\" || r.state === \"partial\").reduce((n, r) => n + 50 * (r.dogCount || 1), 0).toFixed(2)} between them.

${windowLine(dep.windows)}',\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.19 the card can only say\",\n },\n {\n name: \"a dog name out of the CRM reaches Kim's page unescaped\",\n file: \"engine/dashboard.ts\",\n find: \"${escCell(dogsCell(r))}\",\n replace: \"${dogsCell(r)}\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.7 a customer's name is escaped\",\n },\n {\n name: \"the footer stops naming the payment routes the card cannot see\",\n file: \"engine/dashboard.ts\",\n find: \"${esc(OTHER_ROUTES)} Only overnight boarding stays are counted here\",\n replace: \"Only overnight boarding stays are counted here\",\n once: true,\n suite: \"dashboard.test.mjs\",\n mustFail: \"D5.12 the card says the deposit is per dog\",\n },\n // ---- ROUND 14, 7 August. Every one of these is a fault that shipped green until this round. ----\n {\n name: \"the page renders an object as [object Object] again\",\n file: \"engine/dashboard.ts\",\n find: 'const text = (s: unknown) => (typeof s === \"string\" ? s : typeof s === \"number\" && Number.isFinite(s) ? String(s) : \"\");',\n replace: 'const text = (s: unknown) => String(s ?? \"\");',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"a bidi override in a customer name reaches the page and reorders the cell\",\n file: \"engine/dashboard.ts\",\n find: '.replace(/[\\\\u202A-\\\\u202E\\\\u2066-\\\\u2069\\\\u200E\\\\u200F\\\\u061C]/g, \"\")',\n replace: \"\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.25 a name typed by a stranger\",\n },\n {\n name: \"a name out of the booking form is rendered with no length cap\",\n file: \"engine/dashboard.ts\",\n find: \" return esc(raw.length > MAX_CELL ? `${raw.slice(0, MAX_CELL)}...` : raw);\",\n replace: \" return esc(raw);\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.25 a name typed by a stranger\",\n },\n {\n name: \"the length cap is put back on esc itself, truncating the card's own sentences\",\n file: \"engine/dashboard.ts\",\n find: \"const esc = (s: unknown) => text(s).replace(\",\n replace: \"const esc = (s: unknown) => text(s).slice(0, 120).replace(\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the stored row list is spread without checking it is a list\",\n file: \"engine/dashboard.ts\",\n find: ' const rows = (Array.isArray(dep.rows) ? dep.rows : []).filter((r): r is DepositRow => !!r && typeof r === \"object\")',\n replace: \" const rows = [...(dep.rows ?? [])].filter((r): r is DepositRow => true)\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the row sort reads .day without checking it is a string\",\n file: \"engine/dashboard.ts\",\n find: \"|| day(a).localeCompare(day(b)));\",\n replace: \"|| a.day.localeCompare(b.day));\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the dogs cell filters a field that may not be an array\",\n file: \"engine/dashboard.ts\",\n find: ' const names = (Array.isArray(r.dogs) ? r.dogs : []).filter((d) => typeof d === \"string\" && d.trim());',\n replace: \" const names = ((r.dogs ?? []) as string[]).filter(Boolean);\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"the windows line maps a field that may not be an array\",\n file: \"engine/dashboard.ts\",\n find: \" const ws = (Array.isArray(windows) ? windows : [])\",\n replace: \" const ws = ((windows ?? []) as any[])\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.21 a malformed stored list\",\n },\n {\n name: \"a list of unknown age is silently treated as fresh\",\n file: \"engine/dashboard.ts\",\n find: \" const stale = !Number.isFinite(ageH)\",\n replace: \" const stale = false && !Number.isFinite(ageH)\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.23 a list whose age cannot be read\",\n },\n {\n name: \"the headline is read back out of the blob instead of generated from the rows\",\n file: \"engine/dashboard.ts\",\n find: ' const sentence = depositSentence(rows.map((r) => ({ state: shown(r) === DEP_STATE.could_not_check ? \"could_not_check\" : r.state })), !!dep.feedDead);',\n replace: \" const sentence = dep.sentence;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.22 the headline is generated\",\n },\n {\n name: \"an unreadable state gets a grey dot beside an orange label again\",\n file: \"engine/dashboard.ts\",\n find: \" const shown = (r: DepositRow) => DEP_STATE[r.state] ?? DEP_STATE.could_not_check;\",\n replace: ' const shown = (r: DepositRow) => ({ color: DEP_STATE[r.state]?.color ?? \"#6b7280\", label: DEP_STATE[r.state]?.label ?? \"Worth a look\" });',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.24 a state this code does not recognise\",\n },\n {\n name: \"a row with no name renders as a blank settled row\",\n file: \"engine/dashboard.ts\",\n find: ' const who = (r: DepositRow) => (typeof r.name === \"string\" && r.name.trim() ? r.name : \"name not readable\");',\n replace: \" const who = (r: DepositRow) => r.name;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.26 a row with no readable name\",\n },\n {\n name: \"an unreadable stored list is presented as an empty season\",\n file: \"engine/dashboard.ts\",\n find: \" if (dep.rows !== undefined && dep.rows !== null && !Array.isArray(dep.rows)) {\",\n replace: \" if (false) {\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.27 a stored list that is not a list\",\n },\n {\n name: \"the empty card goes back to saying nothing has been collected\",\n file: \"engine/dashboard.ts\",\n find: \"The deposit check has not run yet, so there is nothing to show here.\",\n replace: \"Nothing collected yet.\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.2 nothing collected yet\",\n },\n {\n name: \"a run that read fewer calendars overwrites the complete stored list\",\n file: \"engine/deposits.ts\",\n find: \" if (!force && prev && missedNow > missedBefore) {\",\n replace: \" if (false && !force && prev && missedNow > missedBefore) {\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D41 a run that saw fewer calendars\",\n },\n {\n name: \"the attempt stamp is written after the collection instead of before it\",\n file: \"engine/deposits.ts\",\n find: \" await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\\n const tok = await token();\",\n replace: \" const tok = await token();\\n await b.setJSON(ATTEMPT_KEY, { at: new Date().toISOString(), source }).catch(() => {});\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D43 the refresh gate is claimed\",\n },\n {\n name: \"which payment settles a stay goes back to array order\",\n file: \"engine/holiday-deposits.ts\",\n find: \" .sort((a, b) => when(a) - when(b) || String(a.id).localeCompare(String(b.id)));\",\n replace: \" .slice();\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H86 which payment settles a stay\",\n },\n {\n name: \"two stays on the same day are settled in whatever order they arrived\",\n file: \"engine/holiday-deposits.ts\",\n find: \" const ordered = [...stays].sort((a, b) => a.day.localeCompare(b.day) || key(a).localeCompare(key(b)));\",\n replace: \" const ordered = [...stays].sort((a, b) => a.day.localeCompare(b.day));\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H86 which payment settles a stay\",\n },\n {\n name: \"the deposit note offers cash as a place to look\",\n file: \"engine/holiday-deposits.ts\",\n find: 'export const OTHER_ROUTES = \"A deposit paid by Venmo, Zelle or a cheque does not reach the card system, so it will not show here.\";',\n replace: 'export const OTHER_ROUTES = \"A deposit paid by Venmo, Zelle, cheque or cash does not reach the card system, so it will not show here.\";',\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H60 Kim is told where else to look\",\n },\n {\n name: \"a UTC drop-off time is sliced instead of converted, moving evening stays a day\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (/\\\\dZ$/.test(startTime)) {\",\n replace: \" if (false) {\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H8 the local day is read off the string\",\n },\n {\n name: \"the last sighting of a repeated payment wins instead of the first\",\n file: \"engine/holiday-deposits.ts\",\n find: \" if (!prev || (at && prev.at && at < prev.at)) out.set(id, { amount, id, at, kind });\",\n replace: \" if (!prev || (at && prev.at && at > prev.at)) out.set(id, { amount, id, at, kind });\",\n once: true, suite: \"holiday-deposits.test.mjs\", mustFail: \"H85 a payment written into the notes\",\n },\n {\n name: \"the deposit schedules are deployed as plain scripts, so neither ever fires\",\n file: \"scripts/deploy.mjs\",\n find: '\"deposits-cron.ts\": \"interval\"',\n replace: '\"deposits-cron.ts\": \"script\"',\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D42 both schedules are wired\",\n },\n {\n name: \"the cron's refresh call is moved out of the file's own default export\",\n file: \"engine/deposits-cron.ts\",\n find: \"export default async function (): Promise {\",\n replace: \"export default async function (): Promise { return; }\\nasync function unused(): Promise {\",\n once: true, suite: \"deposits-collect.test.mjs\", mustFail: \"D42 both schedules are wired\",\n },\n {\n name: \"an accusation is added to the Stay column\",\n file: \"engine/dashboard.ts\",\n find: \"${esc(stayDates(r))}\",\n replace: '${esc(stayDates(r))}${r.state === \"none_seen\" ? \" (still to pay)\" : \"\"}',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.20 the card renders a row\",\n },\n {\n name: \"the missed-calendar banner accuses the customers it could not see\",\n file: \"engine/dashboard.ts\",\n find: \"missing from the list below.

` : \\\"\\\";\",\n replace: \"missing from the list below, and those deposits are unpaid.

` : \\\"\\\";\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the pick-up banner accuses the customers it could not see\",\n file: \"engine/dashboard.ts\",\n find: \"may be missing from this list.

` : \\\"\\\";\",\n replace: \"may be missing from this list, and those deposits are outstanding.

` : \\\"\\\";\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the test-record warning accuses the record it is warning about\",\n file: \"engine/dashboard.ts\",\n find: \"so check who it is before you call.\",\n replace: \"so check who it is before you call. This one has not paid.\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the dead-feed sentence contradicts itself and accuses everybody\",\n file: \"engine/holiday-deposits.ts\",\n find: \"so the list is being held back until that is checked.`;\",\n replace: \"so the list is being held back until that is checked. Nobody below has paid a deposit.`;\",\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.4 the word unpaid\",\n },\n {\n name: \"the dot colour is chosen at the render site rather than from the allowed set\",\n file: \"engine/dashboard.ts\",\n find: '',\n replace: '',\n once: true, suite: \"dashboard.test.mjs\", mustFail: \"D5.24b every REAL state\",\n },\n];\n\n// ---------------------------------------------------------------------------------------------\nconst log = (s = \"\") => console.log(s);\n\n// HOW MANY CONTROLS THERE ARE SUPPOSED TO BE. A ratchet, checked before anything runs and\n// regardless of --only.\n//\n// [was: nothing. On 6 August a bad edit truncated this file and deleted the whole runner; it then\n// printed NOTHING and exited 0, which reads exactly like \"all controls passed\". That was fixed by\n// making run-all re-prove seven controls every run. On 7 August an adversarial pass found the\n// same hole one turn down: truncate the ARRAY rather than the runner — cut it to three entries —\n// and the file prints `=== RESULT: 3 passed, 0 failed ===` and exits 0. Not silence this time; a\n// small, plausible, entirely fake green. Fourteen controls sit past the last of run-all's seven\n// critical ones, so a tail truncation there is caught by nothing at all.]\nconst EXPECTED_CONTROL_COUNT = 203;\nif (CONTROLS.length < EXPECTED_CONTROL_COUNT) {\n log(`RUNNER FAILURE: CONTROLS holds ${CONTROLS.length} entries; at least ${EXPECTED_CONTROL_COUNT} are expected.`);\n log(\"Controls have been lost. Refusing to report any result: a short run is not a clean run.\");\n process.exit(1);\n}\n\n// A CONTROL'S FINGERPRINT: the fault it actually injects, not the name somebody typed above it.\n// run-all.mjs re-proves seven money controls on every test run and matched them BY NAME, so\n// leaving the name in place and swapping the find/replace/mustFail underneath it kept the reassuring\n// line \"7 money guards each proved to still fire\" printing for a guard that no longer tested the\n// money bug it is named for. Proved on 7 August. The fingerprint is printed on every pass and\n// pinned in run-all.mjs.\nconst fingerprint = (c) => createHash(\"sha256\").update(JSON.stringify([c.file, c.find, c.replace, c.suite, c.mustFail, !!c.mustStayGreen])).digest(\"hex\").slice(0, 12);\n\n// THE CLEAN TREE MUST BE GREEN BEFORE A FAULT PROVES ANYTHING.\n//\n// A control claims: \"inject this fault, and that named test goes red.\" If the named test was\n// ALREADY red — an unrelated bug, a half-finished edit, a stale build — then the control passes\n// having proved nothing whatsoever about its own injection. Proved on 7 August by pointing a\n// control's `replace` at its own `find` (a byte-identical no-op) alongside one unrelated broken\n// constant: the control passed, on a fault it did not cause and could not have caused.\n//\n// Built once and memoized per suite, so this costs one build and one run per suite for the whole\n// session rather than one per control.\nconst baselines = new Map();\nlet cleanTree = null;\nfunction baselineIsGreen(suite) {\n if (baselines.has(suite)) return baselines.get(suite);\n if (!cleanTree) {\n cleanTree = mkdtempSync(join(tmpdir(), \"nc-clean-\"));\n for (const d of [\"engine\", \"tests\", \"handover\", \"scripts\"]) cpSync(join(ROOT, d), join(cleanTree, d), { recursive: true });\n const b = spawnSync(\"node\", [join(ROOT, \"scripts/build.mjs\"), \"--src\", join(cleanTree, \"engine\"), \"--out\", join(cleanTree, \"build\")],\n { encoding: \"utf8\", timeout: 180_000 });\n if (b.status !== 0) {\n log(\"RUNNER FAILURE: the CLEAN tree will not build. No control can prove anything against it.\");\n log((b.stdout + b.stderr).trim().slice(0, 600));\n process.exit(1);\n }\n }\n const isTs = suite.endsWith(\".ts\");\n const r = spawnSync(isTs ? \"npx\" : \"node\", isTs ? [\"--yes\", \"tsx\", join(cleanTree, \"tests\", suite)] : [join(cleanTree, \"tests\", suite)],\n { encoding: \"utf8\", cwd: cleanTree, timeout: 180_000 });\n const green = r.status === 0;\n baselines.set(suite, green);\n if (!green) {\n const red = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\")).slice(0, 3).join(\" | \");\n log(`baseline: ${suite} is ALREADY RED before any fault is injected -> ${red.slice(0, 240)}`);\n }\n return green;\n}\n\nlet pass = 0, fail = 0;\nconst failures = [];\n\nfunction runControl(c, i) {\n // Nothing this control does can mean anything if its suite is red to begin with.\n if (!baselineIsGreen(c.suite)) return bad(c, `${c.suite} is RED on the clean tree, so this control would pass for a reason that is not its own fault`);\n const tmp = mkdtempSync(join(tmpdir(), \"nc-\"));\n try {\n // handover/ comes too: the cross-artifact controls patch the documents Kim actually reads,\n // and that suite resolves them relative to its working directory.\n // scripts/ comes too. [was: engine, tests and handover only — so D42, which reads\n // scripts/deploy.mjs to check both schedules are still deployed as val.town intervals, threw\n // in every control's temp tree. Under the new baseline check that shows up honestly as\n // \"deposits-collect.test.mjs is RED on the clean tree\"; before it, four controls would have\n // passed on a suite that was red for a reason that had nothing to do with them.]\n for (const d of [\"engine\", \"tests\", \"handover\", \"scripts\"]) cpSync(join(ROOT, d), join(tmp, d), { recursive: true });\n\n const target = join(tmp, c.file);\n if (!existsSync(target)) return bad(c, `the file it patches does not exist: ${c.file}`);\n\n let src = readFileSync(target, \"utf8\");\n const applyOne = (find, replace) => {\n const at = src.indexOf(find);\n if (at === -1) return false;\n src = src.slice(0, at) + replace + src.slice(at + find.length);\n return true;\n };\n // A control whose injection does not apply is a BROKEN CONTROL, not a pass. This is the\n // failure mode that produced three fake checks: the pattern matched nothing and everyone\n // read the green.\n if (!applyOne(c.find, c.replace)) return bad(c, `injection matched NOTHING in ${c.file}: this control is blind`);\n if (c.then && !applyOne(c.then.find, c.then.replace)) return bad(c, `the follow-up injection matched nothing`);\n writeFileSync(target, src);\n\n // Rebuild the patched tree.\n const b = spawnSync(\"node\", [join(ROOT, \"scripts/build.mjs\"), \"--src\", join(tmp, \"engine\"), \"--out\", join(tmp, \"build\")],\n { encoding: \"utf8\", timeout: 180_000 });\n if (b.status !== 0) return bad(c, `the patched tree would not build, so the suite never ran:\\n${(b.stdout + b.stderr).trim().slice(0, 400)}`);\n\n // Run the one suite that owns this guarantee.\n const isTs = c.suite.endsWith(\".ts\");\n const r = spawnSync(isTs ? \"npx\" : \"node\", isTs ? [\"--yes\", \"tsx\", join(tmp, \"tests\", c.suite)] : [join(tmp, \"tests\", c.suite)],\n { encoding: \"utf8\", cwd: tmp, timeout: 180_000 });\n const out = `${r.stdout ?? \"\"}${r.stderr ?? \"\"}`;\n\n // An INVERTED control: the injection is something the check must NOT react to. A structural\n // check that reads code has to stay green when the forbidden text appears only in a comment;\n // if it goes red, it is matching prose and every green it has ever given is worthless.\n if (c.mustStayGreen) {\n if (r.status !== 0) {\n const red = out.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\")).join(\" \").slice(0, 300);\n return bad(c, `the suite went RED on text that appears only inside a comment: it is matching prose, not code.\\n ${red}`);\n }\n pass++;\n log(`PASS control ${i + 1}: ${c.name}`);\n log(` -> ${c.suite} stayed green, so it is reading code rather than comments [fp:${fingerprint(c)}]`);\n return true;\n }\n\n if (r.status === 0) return bad(c, `THE SUITE STAYED GREEN with the fault injected. ${c.suite} cannot catch this.`);\n\n // Red is necessary but not sufficient. The NAMED test must be the one that went red.\n const redLines = out.split(\"\\n\").filter((l) => l.startsWith(\"FAIL\"));\n if (!redLines.length) return bad(c, `the suite exited non-zero but printed no FAIL line: it crashed rather than caught anything.\\n${out.trim().slice(0, 300)}`);\n if (!redLines.some((l) => l.includes(c.mustFail))) {\n return bad(c, `red, but on the wrong test. Expected \"${c.mustFail}\", got:\\n ${redLines.join(\"\\n \").slice(0, 400)}`);\n }\n\n pass++;\n log(`PASS control ${i + 1}: ${c.name}`);\n log(` -> ${c.suite} went red on \"${c.mustFail}\" [fp:${fingerprint(c)}]`);\n return true;\n } finally {\n rmSync(tmp, { recursive: true, force: true });\n }\n}\n\nfunction bad(c, why) {\n fail++;\n failures.push(`${c.name}\\n ${why}`);\n log(`FAIL control: ${c.name}`);\n log(` ${why.split(\"\\n\").join(\"\\n \")}`);\n return false;\n}\n\n// `--only ` runs a subset while iterating on one module. It is DELIBERATELY loud:\n// a filtered green is not a green, and the banner says so on the way in and on the way out, so\n// nobody can paste a partial run into a report and call the suite clean.\nconst onlyIx = process.argv.indexOf(\"--only\");\nconst ONLY = onlyIx > -1 ? process.argv[onlyIx + 1] : null;\nconst SELECTED = ONLY ? CONTROLS.filter((c) => c.name.includes(ONLY) || c.file.includes(ONLY) || c.suite.includes(ONLY)) : CONTROLS;\nif (ONLY && !SELECTED.length) {\n log(`--only \"${ONLY}\" matched none of the ${CONTROLS.length} controls. Refusing to report a green on zero work.`);\n process.exit(1);\n}\n\nif (ONLY) log(`\\n*** FILTERED RUN: ${SELECTED.length} of ${CONTROLS.length} controls (\"${ONLY}\"). THIS IS NOT A FULL PASS. ***`);\nlog(`\\nNEGATIVE CONTROLS — injecting ${SELECTED.length} faults, one at a time.\\n`);\nSELECTED.forEach(runControl);\n\nlog(`\\n=== RESULT: ${pass} passed, ${fail} failed ===`);\nif (ONLY) log(`*** FILTERED RUN: ${CONTROLS.length - SELECTED.length} controls were not run. This does not clear the suite. ***`);\nif (fail) {\n log(`\\n${fail} guarantee(s) are not actually guarded. A green suite means nothing for these:`);\n for (const f of failures) log(` - ${f}`);\n}\nprocess.exit(fail ? 1 : 0);\n\n\n\n=====FILE tests/registry.test.mjs =====\n// WATCHING A LIST SOMEBODY ELSE CONTROLS.\n// The watchdog has watched Kim's 165 automations since 4 August and has never once been seen to\n// fire, because firing requires somebody to change something. That is the definition of a check\n// nobody has verified. The comparison lives on its own now so it can be exercised directly, and\n// every case below is a way the watch could quietly stop working.\nimport * as R from \"../build/registry-diff.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done } = suite(\"registry\");\n\nconst KB_BEFORE = {\n XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T02:38\",\n ZkVFb: \"Chloe - Boarding @2026-07-31T12:47\",\n roL2d: \"Ava Knowledgebase @2026-08-03T03:34\",\n};\n\nt(\"G1 an edit in place is caught, which is the case the whole watch exists for\", () => {\n // Same id, same name, new timestamp. Nothing is added and nothing is removed, so a check that\n // only counted entries would see nothing at all — and this is exactly what happened to the\n // consolidated knowledge base at 02:38 on 5 August.\n const after = { ...KB_BEFORE, XOsEp: \"UPDATED - CONSOLIDATED [THE DOGS SPOT] @2026-08-05T09:12\" };\n const c = R.registryDiff(KB_BEFORE, after);\n ok(c.changed, \"an in-place edit was not noticed\");\n eq(c.added, []);\n eq(c.removed, []);\n eq(c.edited.length, 1);\n ok(/02:38 -> .*09:12/.test(c.edited[0]), `the change does not show what moved: ${c.edited[0]}`);\n return scoped(5, \"assertions\");\n});\n\nt(\"G2 additions and removals are told apart, and named\", () => {\n const added = R.registryDiff(KB_BEFORE, { ...KB_BEFORE, newId: \"Brand New KB @2026-08-06T00:00\" });\n eq(added.added, [\"Brand New KB @2026-08-06T00:00\"]);\n eq(added.removed, []);\n const { ZkVFb, ...minusOne } = KB_BEFORE;\n const removed = R.registryDiff(KB_BEFORE, minusOne);\n eq(removed.removed, [\"Chloe - Boarding @2026-07-31T12:47\"]);\n eq(removed.added, []);\n ok(removed.changed && added.changed);\n return scoped(5, \"assertions\");\n});\n\nt(\"G3 an unchanged registry is silent, so the alarm does not cry wolf every pass\", () => {\n const c = R.registryDiff(KB_BEFORE, { ...KB_BEFORE });\n eq(c.changed, false, \"an identical registry reported a change\");\n eq([...c.added, ...c.removed, ...c.edited], []);\n // key ORDER must not matter: the CRM does not promise one\n const shuffled = Object.fromEntries(Object.entries(KB_BEFORE).reverse());\n eq(R.registryDiff(KB_BEFORE, shuffled).changed, false, \"a reordered list reads as a change\");\n return scoped(3, \"assertions\");\n});\n\nt(\"G4 a first run has no baseline and must not report the whole world as new\", () => {\n // The very first pass writes a baseline. If it also alarmed, every deploy would page somebody.\n const c = R.registryDiff(null, KB_BEFORE);\n eq(c.added.length, 3, \"a first run should still be able to describe what it found\");\n eq(c.removed, []);\n eq(c.edited, []);\n // and the watchdog only alarms when prev exists, which is the caller's job — proven in G6\n return scoped(3, \"assertions\");\n});\n\nt(\"G5 garbage in does not throw and does not invent a change\", () => {\n for (const junk of [null, undefined, \"not an object\", 42, []]) {\n const c = R.registryDiff(junk, junk);\n eq(c.changed, false, `${JSON.stringify(junk)} produced a change out of nothing`);\n }\n eq(R.registryDiff(KB_BEFORE, null).removed.length, 3, \"a null 'now' should read as everything gone, for the caller to judge\");\n return scoped(6, \"shapes\");\n});\n\nt(\"G6 an empty list on a good response is treated as a glitch, not as a deletion\", () => {\n // The rule the workflow watch learned the hard way: overwriting a baseline with an empty list\n // fires \"everything removed\" this pass and \"everything added\" the next.\n ok(R.looksLikeAGlitch(0, 8), \"an empty response after a healthy one is being believed\");\n ok(!R.looksLikeAGlitch(0, 0), \"a genuinely empty account is being called a glitch forever\");\n ok(!R.looksLikeAGlitch(8, 8), \"a normal response is being called a glitch\");\n ok(!R.looksLikeAGlitch(3, 8), \"a partial response is being called a glitch: it is a real change\");\n ok(!R.looksLikeAGlitch(0, null), \"a missing baseline is being called a glitch\");\n return scoped(5, \"cases\");\n});\n\nt(\"G7 the sentence is generated from the change and says how much it left out\", () => {\n const many = {};\n for (let i = 0; i < 9; i++) many[`id${i}`] = `Thing ${i} @2026-08-06T00:00`;\n const c = R.registryDiff({}, many);\n const line = R.registrySentence(c, \"her knowledge bases\");\n ok(/Added: Thing 0/.test(line), \"the sentence does not name what changed\");\n ok(/6 more not listed here/.test(line), `the sentence hides how much it truncated: ${line}`);\n const quiet = R.registrySentence(R.registryDiff(KB_BEFORE, KB_BEFORE), \"her automations\");\n ok(/Nothing has moved in her automations/.test(quiet), quiet);\n ok(!/undefined|NaN|\\[object/.test(line + quiet), \"a stray value reached the sentence\");\n return scoped(4, \"assertions\");\n});\n\ndone();\n\n\n=====FILE tests/render.test.mjs =====\n// MESSAGE RENDERING — the escape and merge rules, tested directly.\n// Two of these are regressions from a security review: a name containing $-patterns corrupting the\n// body, and contact-typed text reaching the HTML unescaped. Both shipped once.\nimport * as R from \"../build/render.js\";\nimport { suite, ok, eq, scoped } from \"./_harness.mjs\";\nconst { t, done, header } = suite(\"render\");\n\nheader(\"MERGE FIELDS\");\nt(\"M1.1 blank names fall back rather than rendering 'Hi ,'\", () => {\n eq(R.resolveFirstName(\"\"), \"there\"); eq(R.resolveFirstName(null), \"there\"); eq(R.resolveFirstName(\" \"), \"there\");\n eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", \"\", \"\"), \"Hi there!\");\n return scoped(4, \"cases\");\n});\nt(\"M1.2 a name full of $-patterns cannot corrupt the body\", () => {\n // String.replace treats $&, $', $` and $1 as references. With a string replacement a customer\n // named Bo$$ would have injected fragments of the template into their own message.\n const evils = [\"Bo$$\", \"Re$&\", \"$'\", \"$`\", \"$1$2\", \"A$&B\"];\n for (const e of evils) eq(R.applyMergeFields(\"Hi {{FIRST_NAME}}!\", e, \"\"), `Hi ${e}!`, `name ${e} mangled`);\n return scoped(evils.length, \"hostile names\");\n});\nheader(\"HTML ESCAPING\");\nt(\"M2.1 every dangerous character is escaped\", () => {\n eq(R.escHtml(`

Diff · v706